[security-alerts] FW: [SA19218] Flash Player Unspecified Code Execution Vulnerabilities

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> 
> TITLE:
> Flash Player Unspecified Code Execution Vulnerabilities
> 
> SECUNIA ADVISORY ID:
> SA19218
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/19218/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Macromedia Breeze 4.x
> http://secunia.com/product/6122/
> Macromedia Breeze 5.x
> http://secunia.com/product/5779/
> Macromedia Breeze Meeting Add-In
> http://secunia.com/product/8715/
> Macromedia Flash 8.x
> http://secunia.com/product/7024/
> Macromedia Flash MX 2004
> http://secunia.com/product/3192/
> Macromedia Flash MX Professional 2004
> http://secunia.com/product/3191/
> Macromedia Flash Player 7.x
> http://secunia.com/product/2634/
> Macromedia Flash Player 8.x
> http://secunia.com/product/6153/
> Macromedia Flex 1.x
> http://secunia.com/product/5246/
> Shockwave Player 10.x
> http://secunia.com/product/4909/
> 
> DESCRIPTION:
> Some vulnerabilities have been reported in Flash Player, which can be
> exploited by malicious people to compromise a user's system.
> 
> The vulnerabilities are caused due to unspecified errors and can be
> exploited to execute arbitrary code on a user's system when a
> malicious SWF file is loaded.
> 
> SOLUTION:
> Install updated versions.
> 
> Flash Player 8.0.22.0 and earlier:
> Update to version 8.0.24.0 or 7.0.63.0.
> http://www.macromedia.com/go/getflash
> 
> Flash Player 8.0.22.0 and earlier - network distribution:
> Update to version 8.0.24.0 or 7.0.63.0.
> http://www.macromedia.com/licensing/distribution
> 
> Flash Professional 8, Flash Basic:
> Update to version 8.0.24.0.
> http://www.macromedia.com/support/flash/downloads.html
> 
> Flash MX 2004:
> Update to version 7.0.63.0.
> http://www.macromedia.com/support/flash/downloads.html
> 
> Flex 1.5:
> Update to version 8.0.24.0.
> http://www.macromedia.com/go/3d2855d6
> 
> Breeze Meeting Add-In:
> Update to version 7.0.55.331 (Win) or 7.0.55.118 (Mac).
> http://adobe.breezecentral.com/common/help/en/support/downloads.htm
> 
> Shockwave Player:
> Update to version 10.1.1.
> http://www.macromedia.com/shockwave/download/
> 
> PROVIDED AND/OR DISCOVERED BY:
> The vendor credits Microsoft for reporting the vulnerabilities.
> 
> ORIGINAL ADVISORY:
> Adobe Systems (formerly Macromedia):
> http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html
> 
> Microsoft:
> http://www.microsoft.com/technet/security/advisory/916208.mspx
> 
> ----------------------------------------------------------------------