-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-075A
Adobe Macromedia Flash Products Contain Vulnerabilities
Original release date: March 16, 2006
Last revised: --
Source: US-CERT
Systems Affected
Microsoft Windows, Mac OS X, and other operating systems that use
the following products:
* Adobe Macromedia Flash Player
* Adobe Macromedia Flash
* Adobe Macromedia Flex
* Adobe Macromedia Breeze
* Adobe Macromedia Shockwave Player
Overview
There are critical vulnerabilities in Macromedia Flash player and
related software that may allow an attacker to take control of your
computer.
Solution
Apply Updates
Adobe has provided the updates for these vulnerabilities. To obtain
the update, visit the Security Bulletin. US-CERT recommends that
you update to the most current version of your Macromedia product.
Description
Some features of Macromedia products contain critical
vulnerabilities. If an attacker can convince you to open a
malicious Flash file, which may be hosted on a web site, he or she
may be able to take control of your computer or cause it to crash.
The Macromedia Security Bulletin provides updates that address
these vulnerabilities. For more technical information, see US-CERT
Technical Cyber Security Alert TA06-075A.
References
* US-CERT Technical Cyber Security Alert TA06-075A.html -
<http://www.us-cert.gov/cas/techalerts/TA06-075A.html>
* US-CERT Vulnerability Note VU#945060 -
<http://www.kb.cert.org/vuls/id/945060>
* Macromedia - APSB06-03: Flash Player Update to Address Security
Vulnerabilities -
<http://www.macromedia.com/devnet/security/security_zone/apsb06-03
.html>
* Microsoft Security Advisory (916208) -
<http://www.microsoft.com/technet/security/advisory/916208.mspx>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-075A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA06-075A Feedback VU#945060" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
Mar 16, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRBnvgH0pj593lg50AQLiFAgAv8wciY4w0OF9xaQObTTIvM9JXo4UyHvK
n049JniGF+QHFABI2F9afC9PPXj6A3BYW2Z4C4Ep0vroSHMYiJbw1cGVTj5DLGxb
Z80ePQJWRk12UYBV7WaTG6+Iacodq/TarB5EmIxdE946LuO6fktY9jynLKJdTgwg
r4v2VzoOzpmD7pL8/Buun0XaPD8FuKDuQZGs75dNFJ/9L6Ga2Hp57aa+1EbRCyNx
JbRtGErzRI6ucBdOPX5Aci7DdhSq+GuSBUKlrS/vP8qnXTEC7hDFFX1YK4s9KNhh
fhdpyOHGTeGB4cJWD+EU2FAdzsy/ERoC/hJy/z8T7Cnd1kHoZO0MOw==
=Ycog
-----END PGP SIGNATURE-----
