Home > Articles > Adobe Flash Player vulnerability

Adobe Flash Player vulnerability

July 25th, 2007

A new vulnerability in Adobe Flash Player Remote Code Execution has been found and already tested on Windows, Apple Mac and some Linux distributions. As far as Flash can run in few different platforms, the fact that this vulnerability is a cross-platform one, is rather interesting. “The discovery of this one vulnerability could leave all those operating systems and devices that are Flash-enabled open to the attack” says Symantec.com.

Not only Windows, Apple Mac and Linux may be affected by this problem, but also such programs as Nintendo Wii too. Although this gaming console runs a special version of the Opera browser with Flash the vulnerability had an effect on it as well. This effect is easily noticed while browsing a specially crafted video, for Wii completely hangs.

Flash uses a video format files .FLV, which became very popular recently and are also affected by the vulnerability. This format became hugely popular due to the success of such sites as YouTube.com, that uses this format to show their video, Symantec.com adds. Using this format is dangerous in itself, because anyone who uses a vulnerable Flash and attempts to watch the video is in danger to be affected.

According to Symantec.com this means that the creator of the malicious flash file does not even need to host the file on his own server, he may upload it to any hosting site and then send the victims a link to that legitimate site. This problem is a big issue not only for users who want to keep their systems safe, but also for hosting sites, who may soon need to scam all new content for malformed data.    

Although the vulnerability definitely works on Windows there are no real evidence on Linux and Mac. Yet, the possibility of successfully executing code exists on those and other programs, such as Wii. The only way to keep your system from this harmful Adobe Flash Player vulnerability is to keep it updated with the latest patches from Adobe.

Articles

  1. No comments yet.
  1. No trackbacks yet.