By SearchSecurity.com Staff | Jun 29, 2009
Adobe Systems Inc. is warning customers about a critical flaw in Shockwave Player that could be used by an attacker to take complete control of a victim's machine.
The flaw is in Adobe Shockwave Player 11.5.0.596 and earlier versions. An error occurs when the player processes Shockwave Player 10 content and can be exploited to corrupt memory via a specially crafted Adobe Director file.
Adobe is urging users to uninstall versions prior to 11.5.0.600, restart their system and install version 11.5.0.600 [8].
Danish vulnerability clearinghouse Secunia gave the flaw a highly critical rating. So far there have been no reports of exploits in the wild.
The vulnerability was discovered by security researcher Paul Kurczaba and reported to TippingPoint's Zero Day Initiative.
Links:
[1] http://www.searchsecurityasia.com/content/adobe-patches-shockwave-player-flaw#comment
[2] http://www.facebook.com/share.php?u=http://www.searchsecurityasia.com/content/adobe-patches-shockwave-player-flaw
[3] http://www.linkedin.com/shareArticle?mini=true&url=http://www.searchsecurityasia.com/content/adobe-patches-shockwave-player-flaw&title=Adobe patches Shockwave Player flaw&summary=Adobe released an update to its Shockwave Flash Player to repair a critical flaw that could allow an attacker to take complete control of a system.&source=searchsecurityasia.com
[4] http://del.icio.us/post?url=http://www.searchsecurityasia.com/content/adobe-patches-shockwave-player-flaw&title=Adobe patches Shockwave Player flaw
[5] http://www.digg.com/submit?url=http://www.searchsecurityasia.com/content/adobe-patches-shockwave-player-flaw&title=Adobe patches Shockwave Player flaw&bodytext=Adobe released an update to its Shockwave Flash Player to repair a critical flaw that could allow an attacker to take complete control of a system.
[6] http://www.searchsecurityasia.com/forward?path=node/6209
[7] http://www.searchsecurityasia.com/print/6209
[8] http://get.adobe.com/shockwave/
0 comments
Facebook
LinkedIn
Digg
