[PCWorks] Adobe Flash Player Multiple Vulnerabilities
- From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
- To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
- Date: Wed, 18 May 2011 02:19:31 -0500
TITLE:
Adobe Flash Player Multiple Vulnerabilities
SECUNIA ADVISORY ID:
http://secunia.com/advisories/44590/
Criticality level: Highly critical
Impact: Exposure of sensitive information, System access
Where: From remote
DESCRIPTION:
Multiple vulnerabilities have been reported in Adobe Flash
Player,
which can be exploited by malicious people to disclose
potentially
sensitive information and compromise a user's system.
1) An unspecified error can be exploited to disclose certain
information.
2) An integer overflow error can be exploited to potentially
execute
arbitrary code.
3) An unspecified error can be exploited to corrupt memory.
4) A second unspecified error can be exploited to corrupt
memory.
5) A third unspecified error can be exploited to corrupt
memory.
6) A fourth unspecified error can be exploited to corrupt
memory.
7) A boundary error can be exploited to potentially execute
arbitrary
code.
8) A second boundary error can be exploited to potentially
execute
arbitrary code.
9) A third boundary error can be exploited to potentially
execute
arbitrary code.
10) A fourth boundary error can be exploited to potentially
execute
arbitrary code.
11) An unspecified error can be exploited to corrupt memory.
The vulnerabilities are reported in the following versions:
* Adobe Flash Player 10.2.159.1 and earlier for Windows,
Macintosh,
Linux and Solaris.
* Adobe Flash Player 10.2.154.28 and earlier for Chrome.
* Adobe Flash Player 10.2.157.51 and earlier for Android.
SOLUTION:
Apply updates.
ORIGINAL ADVISORY:
Adobe (APSB11-12):
http://www.adobe.com/support/security/bulletins/apsb11-12.html
=========================
The list's FAQ's can be seen by sending an email to
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.
To unsubscribe, subscribe, set Digest or Vacation to on or off, go to
//www.freelists.org/list/pcworks . You can also send an email to
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your
member list settings can be found at
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have
access to numerous other email options.
The list archives are located at //www.freelists.org/archives/pcworks/ .
All email posted to the list will be placed there in the event anyone needs to
look for previous posts.
-zxdjhu-
Other related posts:
