Flash Player update available to address security vulnerabilities
Release date: April 8, 2008
Vulnerability identifier: APSB08-11
CVE number: CVE-2007-5275, CVE-2007-6243, CVE-2007-6637, CVE-2007-6019, CVE-2007-0071, CVE-2008-1655, CVE-2008-1654
Platform: All Platforms
Summary
Critical vulnerabilities have been identified in Adobe Flash Player that could allow an attacker who successfully exploits these potential vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these potential vulnerabilities. It is recommended users update to the most current version of Flash Player available for their operating system.
Due to the possibility that these security enhancements and changes may impact existing Flash content, content developers are advised to review this March 2008 Adobe Developer Center article to determine if the changes will affect their content, and to begin implementing necessary changes immediately to help ensure a seamless transition.
Affected software versions
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier.
To verify the Adobe Flash Player version number, access the About Flash Player page, or right-click on Flash content and select “About Adobe (or Macromedia) Flash Player” from the menu. Customers using multiple browsers are advised to perform the check for each browser installed on their system.
Solution
Adobe recommends all users of Adobe Flash Player 9.0.115.0 and earlier versions upgrade to the newest version 9.0.124.0, by downloading it from the Player Download Center, or by using the auto-update mechanism within the product when prompted.
Severity rating
Adobe categorizes this as a critical update and recommends affected users upgrade to version 9.0.124.0.
Details
