标题: Adobe Flash Player多个漏洞 [打印本页]

---

作者: pioneer     时间: 2009-2-27 17:14    标题: Adobe Flash Player多个漏洞

来源

secunia.com

软件名

Adobe AIR 1.x
Adobe Flash CS3
Adobe Flash CS4
Adobe Flash Player 10.x
Adobe Flash Player 9.x
Adobe Flex 3.x

描述

1)处理多个涉及到一个不特定对象时的一个错误可通过特定的SWF文件来导致解除释放的内存
成功执行后可允许执行任意代码
2)处理SWF文件时的输入验证性错误可导致崩溃并潜在执行任意代码

3)在Windows显示鼠标指针时的一个错误可潜在导致执行"Clickjacking"攻击
4)Linux Flash Player binary 中的错误可导致泄露敏感信息并潜在导致获取扩大的权限

解决方案

应用厂商更新
Flash Player 9.x:
更新到V9.0.159.0.
http://www.adobe.com/go/kb406791

Flash Player 10.0.12.36 and prior:
更新到V10.0.22.87.
http://www.adobe.com/go/getflash

Flash Player 10.0.12.36 and prior (network distribution):
更新到V10.0.22.87.
http://www.adobe.com/licensing/distribution

Flash Player 10.0.15.3 and prior for Linux:
Update to version 10.0.22.87.
http://www.adobe.com/go/getflash

AIR 1.5:
更新到V1.5.1.
http://get.adobe.com/air

Flash CS4 Professional:
更新到V10.0.22.87.
http://www.adobe.com/support/flashplayer/downloads.html#fp10

Flash CS3 Professional:
更新到V9.0.159.0.
http://www.adobe.com/support/flashplayer/downloads.html#fp9

Flex 3:
更新到V10.0.22.87.
http://www.adobe.com/support/flashplayer/downloads.html#fp9

---

欢迎光临 微点交流论坛 (http://bbs.micropoint.com.cn/)

bbs.micropoint.com.cn