Security Patch For Macromedia's Flash Player
Opera software has released a security patch to protect against exploitation of a vulnerability in the Macromedia Flash Player. The vulnerability was reported in Flash Player version 188.8.131.52 and prior on the Windows platform, and in versions prior to 184.108.40.206 on the Unix platform.
Rated as highly critical by Secunia, the vulnerability can be exploited by malicious people who can remotely access and take control of a user’s system.
The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used as an index in Flash.ocx to reference an array of function pointers. This can be exploited via a specially crafted SWF file to cause the index to reference memory that is under the attacker’s control, which causes Flash Player to use attacker supplied values as function pointers.
The vulnerability also affects libflashplayer.so on the Unix platform, according to Secunia. Successful exploitation of the vulnerability can allow execution of arbitrary code.
Opera’s latest release Opera 8.51 for Windows ships with Macromedia Flash version 7r61 addresses the flaw in the Flash Player.
The release is a recommended security upgrade for Linux/ FreeBSD/ Solaris users, because it updates Opera’s wrapper script to not run commands included with URLs passed from other applications.
Users of Mac OS X with Japanese systems will experience improved stability on pages with Java.
- What's BitLocker’s Role In Encryption And Compliance?
- Why 4 out of 10 Security Alerts Go Attended Daily In India?
- Is There A Weak Link In Your Encryption Strategy?
- New Security Flaw Grips Most Modern Laptops: F-Secure Researchers
- Multi-Factor Authentication Can Mitigate Password Risks: Study
- Policybazaar Deploys Trend Micro’s Solutions To Boost Security
- Focus On Visibility To Prevent Cyber Threat, Says Skybox Exec
- Using Digital Transformation To Secure Your Bank Locker
- 96 pc of Firms Experienced At Least One Severe Exploit, Says Study
- Organizations Must Prepare for Data Security Risks To Survive