[security-alerts] FW: [SA20971] Flash Player Unspecified Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Flash Player Unspecified Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA20971
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/20971/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> DoS, System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Macromedia Flash Player 8.x
> http://secunia.com/product/6153/
> 
> DESCRIPTION:
> Haifei Li has reported a vulnerability in Flash Player, which
> potentially can be exploited by malicious people to compromise a
> user's system.
> 
> The vulnerability is caused due to unspecified memory access errors
> within the handling of SWF files and can be exploited via a specially
> crafted SWF file.
> 
> Successful exploitation may allow execution of arbitrary code.
> 
> The vulnerability has been reported in version 8.0.24. Prior versions
> may also be affected.
> 
> SOLUTION:
> Upgrade to version 9.0.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Haifei Li, Fortinet Security Research.
> 
> ORIGINAL ADVISORY:
> http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-20.html
>