11 Aug 2010
Adobe AIR 2.x
This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.
Multiple vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to conduct click-jacking attacks or compromise a user's system.
1) An error in the ActionScript Virtual Machine 1 (AVM1) when handling the "ActionPush" command can be exploited to corrupt memory.
2) Unspecified errors can be exploited to corrupt memory. No more information is currently available.
3) An unspecified error can be exploited to corrupt memory. No more information is currently available.
4) An error in the "connect" method exposed via ActionScript native object number 2200 can be exploited to corrupt memory by calling the method several times with differing strings.
5) An unspecified error can be exploited to corrupt memory. No more information is currently available.
Successful exploitation of vulnerabilities #1 through #5 may allow execution of arbitrary code.
6) A click-jacking error can be exploited to trick a user into performing unintended actions.
Update to a fixed version.
Flash Player 10.1.53.64 and earlier:
Flash Player 10.1.53.64 and earlier - network distribution:
Flash Professional CS5, Flash CS4 Professional and Flex 4:
Flash CS3 Professional and Flex 3:
1) Will Dormann, CERT/CC.