Adobe Flash Player Unspecified Vulnerability

[TCH-Thomas]

From:

Secunia (secunia.com/advisories/30404/)

 

Rating:

Extremely critical

 

Description:

A vulnerability has been reported in Adobe Flash Player, which can be exploited by malicious people to compromise a user's system.

 

The vulnerability is caused due to an unspecified error. No further information is currently available.

 

NOTE: Reportedly, this is currently being actively exploited.

 

The vulnerability is reported in version 9.0.124.0. Other versions may also be affected.

 

Solution:

Do not browse untrusted websites or follow untrusted links.

[TCH-Bruce]

Thanks Thomas. Don't you just love these unspecified vulnerabilities?

[TCH-Thomas]

Some media here in Sweden now reports that this was fixed in the latest version (9.0.124.0) although the Secunia report says otherwise.

[MikeJ]

Some media here in Sweden now reports that this was fixed in the latest version (9.0.124.0) although the Secunia report says otherwise.

 

It was. See Adobe's post about it.

 

UPDATE: This exploit appears to be taking advantage of a known vulnerability, reported by Mark Dowd of the ISS X-Force and wushi of team509, that was resolved in Flash Player 9.0.124.0 (CVE-2007-0071). We strongly encourage everyone to download and install the latest Flash Player update, 9.0.124.0.

 

And the Secunia advisory has been revoked.

 

You can check your flash player version by visiting Adobe's Version Test.