sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] [SMGLSA-2006:11] Flash Player Unspecified Code Execution Vulnerabilities

From: Ladislav Hagara <ladislav.hagara AT unob.cz>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] [SMGLSA-2006:11] Flash Player Unspecified Code Execution Vulnerabilities
Date: Thu, 16 Mar 2006 15:09:25 +0100

Critical vulnerabilities have been identified in Flash Player that could allow an attacker who successfully exploits these vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these vulnerabilities.

For more info:

Adobe APSB06-03 Flash Player Update to Address Security Vulnerabilities
http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html

Secunia Advisories
http://secunia.com/advisories/19218/

CVE-2006-0024
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0024

-----
flash should be updated to version 7.0r63:

# scribe update
# summon -d flash
# cast -c flash

or

# scribe update
# sorcery queue-security
# summon -d flash
# cast --queue

--
Ladislav Hagara

[SM-Security] [SMGLSA-2006:11] Flash Player Unspecified Code Execution Vulnerabilities, Ladislav Hagara, 03/16/2006