Adobe has serious bug fixes in Flash Player

Abobe Systems has just released an extremely important patch to block at least 9 cross-platform vulnerabilities in the Flash Player application.

An upgrade of APSB07-20 code for Adobe Flash Player 9.0, 8.0 and 7.0. This vulnerability has allowed to take over the entire Windows, Mac and Linux systems.

Adobe recommends that all users upgrade to Adobe Flash Player 9.0.115.0 (Windows, Mac, and Linux) through this application's automatic upgrade engine. The fix for Solaris will be released later.

According to Adobe's description, two of the nine vulnerabilities are "input validation errors", which can help hackers execute malicious code on a victim's computer system.

" These vulnerabilities can be accessed via content remotely distributed via Web browser, e-mail application or other applications that are integrated with Flash Player, " Adobe's announcement.

The new upgrade also patched a vulnerability that allowed the implementation of DNS attacks and a new complex Flash Player attack method to compile interdomain policy files. At the same time, the new upgrade also prevents remote attackers from modifying HTTP headers of other queries and performing HTTP Request Splitting attacks.

Adobe also announced that it is phasing out support for Flash Player 7 and will no longer provide security updates for this version.

Van Han