Adobe Flash Player: Arbitrary code execution — GLSA 200610-02

Multiple input validation errors have been identified that allow arbitrary code execution on a user's system via the handling of malicious Flash files.

Affected Packages

www-plugins/adobe-flash on all architectures
Affected versions < 7.0.68
Unaffected versions >= 7.0.68

Background

The Adobe Flash Player is a renderer for Flash files - commonly used to provide interactive websites, digital experiences and mobile content.

Description

The Adobe Flash Player contains multiple unspecified vulnerabilities.

Impact

An attacker could entice a user to view a malicious Flash file and execute arbitrary code with the rights of the user running the player.

Workaround

There is no known workaround at this time.

Resolution

All Adobe Flash Player users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=www-plugins/adobe-flash-7.0.68"

References

Release Date
October 04, 2006

Latest Revision
May 28, 2009: 02

Severity
normal

Exploitable
remote

Bugzilla entries