0 Members and 2 Guests are viewing this topic.
Security Advisory for Flash Player, Adobe Reader and Acrobat http://blogs.adobe.com/psirt/2010/06/security_advisory_for_adobe_re.htmlQuoteA Security Advisory has been posted in regards to a new Adobe Reader, Acrobat and Flash Player issue (CVE-2010-1297). A critical vulnerability exists in Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat.The Flash Player 10.1 Release Candidate available on http://labs.adobe.com/technologies/flashplayer10/ does not appear to be vulnerable.Adobe Reader and Acrobat 8.x are confirmed not vulnerable. Mitigations for Adobe Reader and Acrobat 9.x are included in the Security Advisory.
A Security Advisory has been posted in regards to a new Adobe Reader, Acrobat and Flash Player issue (CVE-2010-1297). A critical vulnerability exists in Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat.The Flash Player 10.1 Release Candidate available on http://labs.adobe.com/technologies/flashplayer10/ does not appear to be vulnerable.Adobe Reader and Acrobat 8.x are confirmed not vulnerable. Mitigations for Adobe Reader and Acrobat 9.x are included in the Security Advisory.
Hi Logos,Thanks for confirming this, for our users. Secunia PSI cannot solve all our patching/upgrading problems.And now has three bugs: http://www.theregister.co.uk/2010/06/02/secunia_bug_check_tool/(only form a problem when you feed up wrongly yourself...)polonus
Hackers expose 114,000 iPad users through AT&T site
A group of hackers exploited a hole in an AT&T website to get email addresses of about 114,000 iPad users, including what appears to be top officials in government, finance, media, technology and military
Critical vulnerability in Adobe Flash Player, Adobe Reader and Acrobat - UPDATEDhttp://www.norman.com/security_center/security_center_archive/2010/83636/en
Adobe recommends all users of Adobe Flash Player 10.0.45.2 and earlier versions upgrade to the newest version 10.1.53.64
Quote from: Pondus on June 11, 2010, 10:58:59 AMCritical vulnerability in Adobe Flash Player, Adobe Reader and Acrobat - UPDATEDhttp://www.norman.com/security_center/security_center_archive/2010/83636/en From the Flash Player siteQuoteAdobe recommends all users of Adobe Flash Player 10.0.45.2 and earlier versions upgrade to the newest version 10.1.53.64I would remove all versions of Flash Player by using the Flash Player uninstaller:http://kb2.adobe.com/cps/141/tn_14157.htmlMake sure to have all browsers sessions closed when running the uninstaller and do a reboot to permit locked files to be removed.http://get.adobe.com/flashplayer <== make sure that you un-select the Free Google Toolbar if you do not want it.
Google toolbar no longer included in the installer, I think. I had problems last night of installing the new Flash plugin. Instead, I downloaded the Active X flash player which is for IE.
Before using the fixit solution, make sure your System is vulnerable.
Vista and Win7 certainly aren't.
Certainly soon there will be malware seen to exploit this for Windows XP SP2 & 3,