New exploits target Adobe Flash Player
WoWinsider posted an interesting blog entry about a 0day flash player exploit actually hitting:
According to reports, a new wave of exploits has appeared taking advantage of a vulnerability Adobe Flash Player. Allegedly over 200,000 web sites now have redirects to malware, including keyloggers, through embedded Flash. And we all know how evil keyloggers can be. Flash Player 9.0.115.0 appear to be the affected version.
The Flash Player 9.0.115.0 is the affected version, you can know which version you are running by using this Adobe link
To note that the version 9.0.124.0 supposed to be patched may still be exploited in a few cases like the linux version nor windows version with debug player ON. If you want to be fully safe, completely uninstall Adobe Flash Player for the moment.
Some technical reference links:
Sans
SecurityFocus
Adobe security advisories
- Thumbs Down
- Thumbs Up
- +2
Mera_LaCroisadeEcarlateYes to resume globally all versions are vulnerable yet , it may be harder to exploit the 9.0.124.0 but this version is reported vulnerable so if you really care for your security the only best patch you can add for now is to completely uninstall Flash player and waits for a version > but not equal to 9.0.124.0, according to news security sites it's an old known Flash vulnerability that has not been patched correctly and so on, all actual versions are at risk.
Posting Tech details link there because the Curse's News editor is bugged a lot there, it does not apply "Edit" changes and it is always reverting back to the original news paper some seconds after editing:
//EDIT: looks like stabler via cursebeta.com
Adobe security advisories
Sans
SecurityFocus