Adobe Flash Player: Arbitrary code execution — GLSA 200610-02

Multiple input validation errors have been identified that allow arbitrary code execution on a user's system via the handling of malicious Flash files.

Affected packages

Background

The Adobe Flash Player is a renderer for Flash files - commonly used to provide interactive websites, digital experiences and mobile content.

Description

The Adobe Flash Player contains multiple unspecified vulnerabilities.

Impact

An attacker could entice a user to view a malicious Flash file and execute arbitrary code with the rights of the user running the player.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=www-plugins/adobe-flash-7.0.68"

References

• Adobe Security Bulletin
• CVE-2006-3311
• CVE-2006-3587
• CVE-2006-3588

Release date
October 04, 2006

Latest revision
May 28, 2009: 02

Severity
normal

Exploitable
remote

Bugzilla entries

• 147421