Skip to Content.
Sympa Menu

sm-security - [SM-Security] [SMGLSA-2006:11] Flash Player Unspecified Code Execution Vulnerabilities

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Ladislav Hagara <ladislav.hagara AT unob.cz>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] [SMGLSA-2006:11] Flash Player Unspecified Code Execution Vulnerabilities
  • Date: Thu, 16 Mar 2006 15:09:25 +0100

Critical vulnerabilities have been identified in Flash Player that could allow an attacker who successfully exploits these vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these vulnerabilities.


For more info:

Adobe APSB06-03 Flash Player Update to Address Security Vulnerabilities
http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html

Secunia Advisories
http://secunia.com/advisories/19218/

CVE-2006-0024
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0024


-----
flash should be updated to version 7.0r63:

# scribe update
# summon -d flash
# cast -c flash

or

# scribe update
# sorcery queue-security
# summon -d flash
# cast --queue


--
Ladislav Hagara



  • [SM-Security] [SMGLSA-2006:11] Flash Player Unspecified Code Execution Vulnerabilities, Ladislav Hagara, 03/16/2006

Archive powered by MHonArc 2.6.24.

Top of Page