Adobe Product Security Incident Response Team (PSIRT): Potential Flash Player issue

Direct reprint from Adobe - Posted by David Lenoe on May 28, 2008 11:09 AM

Adobe Product Security Incident Response Team (PSIRT): Potential Flash Player issue - update

Potential Flash Player issue - update

Here’s a quick update on our progress investigating the recent reports of a potential Flash Player exploit in the wild. The exploit appears to be taking advantage of a known vulnerability, reported by Mark Dowd of the ISS X-Force and wushi of team509, that was resolved in Flash Player 9.0.124.0 (CVE-2007-0071). This exploit does NOT appear to include a new, unpatched vulnerability as has been reported elsewhere – customers with Flash Player 9.0.124.0 should not be vulnerable to this exploit. We’re still looking in to the exploit files, and will update everyone with further information as we get it, but for now, we strongly encourage everyone to download and install the latest Flash Player update, 9.0.124.0.

Darrell Mishler

LinkedIn Profile

M & D Creative Concepts LLC

Web Design Services