Aral Balkan

There is a security advisory published by Adobe that urges users to upgrade to the latest Flash Player (currently 9.0.47.0 on Win/Mac/Solaris and 9.0.48.0 on Linux).

Critical vulnerabilities have been identified in Adobe Flash Player that could allow an attacker who successfully exploits these potential vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these potential vulnerabilities. Users are recommended to update to the most current version of Flash Player available for their platform.

Affected software versions include Adobe Flash Player 9.0.45.0 and earlier, 8.0.34.0 and earlier, and 7.0.69.0 and earlier.

Comments

• I'm confused too whether 9.0.6 fixes it too... but, for those interested, you can update your debug players etc. from: http://www.adobe.com/support/flashplayer/downloads.html#fp9

  by Phillip Kerman on 2007-07-17 16:02:32

• This is intereting. It didn't crash for me in safari 3 either.

  by Bruce Swedal on 2007-07-17 18:38:19

• The update link above (well the page that attempts to render) crashes my Safari - works fine in Firefox.

  by creacog on 2007-07-17 13:02:02

• Hi creacog, Interesting, it doesn't crash for me either in Safari 3 or Shiira. Wondering if it's a Safari 2 issue.

  by Aral on 2007-07-17 13:29:08

• Hmm, mime is 9.0.60, should I update?

  by Eric Suen on 2007-07-17 16:00:31

• thanks for the heads up... does anybody know where i can get some code to test this? ok maybe we should sweep this under the rug, but i just can't help wondering how this exploit works... i would love to know...

  by ryan on 2007-07-17 22:41:45

• yep - running Safari 2.04 on a G4. Occasionally hitting other pages on the Adobe site that crash it too. Maybe something else on my system, or related to 10.4.10. Certainly when my CS3 apps occasionslly crash they think my system is 10.4.9. Perhaps time to try Safari 3.

  by creacog on 2007-07-18 15:21:40

• weird crashes safari 3 for me also, just renders str8 to installation even though installed then on installation again crashes safari! mac osx 10.4.10

  by Simon on 2007-07-31 18:32:17