Adobe Flash Player "SWF" File Remote Memory Corruption Vulnerability

Release date:
Updated on:

Affected Systems:
Adobe Acrobat 10.0.1
Adobe Acrobat 9.x
Adobe Acrobat 8.x
Adobe Flash Player 10.x
Adobe Reader 9.x
Adobe Reader 10.0.1
Adobe Reader 10.0
Description:
--------------------------------------------------------------------------------
Bugtraq id: 46860
Cve id: CVE-2011-0609

Flash Player is a very popular Flash Player.

Adobe Flash Player has a remote memory corruption vulnerability in the implementation of SWF files. Attackers can exploit these vulnerabilities to execute arbitrary code in the affected applications, resulting in DOS.

This vulnerability has been widely used by Flash (.swf) files embedded in Microsoft Excel (.xls) that are sent as email attachments.

<* Link: http://www.adobe.com/support/security/advisories/apsa11-01.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Adobe
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.adobe.com