Home
Topics
Managing platform and application security
Vulnerability and patch management
Critical Adobe Flash security vulnerability affects documents with SWF

Security Alert

Critical Adobe Flash security vulnerability affects documents with SWF

SearchSecurity.in Staff

A recent security bulletin from CERT refers to an Adobe Flash security vulnerability which can cause memory corruption and allow attackers to execute arbitrary code on the victim’s system. The bulletin details this Adobe Flash security issue,

Requires Free Membership to View

Login

By submitting you agree to receive email communications from
TechTarget and its partners. Privacy Policy Terms of Use.

which convinces victims to open a specially created HTML or any other document (such as a PDF file or Microsoft Office document) that supports embedded SWF content. Following this action, the attacker can execute malicious code on the compromised system.

This vulnerability affects Flash Player 10.1.82.76 and earlier versions for Windows, Macintosh, Linux, and Solaris, Flash Player for Android (version 10.1.92.10), as well as Adobe Reader and Adobe Acrobat 9.3.4 and earlier. The issue can be overcome by changing Adobe Flash security settings using a step by step process, as explained in the CERT bulletin. Adobe has also issued security advisories giving in-depth information on the Flash security issue, along with corrective measures.

Related Topics: Vulnerability and patch management, Hacking countermeasures, Application and Web threat defenses, VIEW ALL TOPICS

More News and Tutorials

Articles

Related glossary terms

Terms for Whatis.com - the technology online dictionary
- Data Security Council of India (DSCI)
- vulnerability and patch management

More from Related TechTarget Sites

CIO
Data Center
Business Intelligence
Security
SMB Security
Financial Security

CIO
- Indian health care needs IT boost
  
  Health care providers in India will spend 57 billion rupees on IT products and services in 2013 compared to 53 billion rupees spent in 2012.
- Indian enterprises invest in IT for growth
  
  In 2013, Indian CIOs increasingly will spend money on IT aimed at helping their business grow, according to a joint survey from the CIO Klub and Ernst & Young India.
- As IT pervades the enterprise, here comes the chief procurement officer
  
  The rise of the chief procurement officer raises questions about the role of IT.
Data Center
- Making mainframe technology hip again
  
  IBM keeps improving mainframe technology, but what is the long-term forecast for big iron as third-party tools decline and mainframe experts retire?
- Determining the best Linux distribution for your enterprise
  
  There are many flavors of Linux, making the selection process for the best Linux distribution for your business difficult to whittle down.
- Cloud critical to e-governance in India
  
  The Government of India is expanding e-governance throughout the country and is working on embracing cloud computing for it.
searchBusinessIntelligenceIN
- Exploring the 'Big Data Frontier'
  
  IT business strategist Harvey Koeppel draws on historical data to explore the 'Big Data Frontier' and its potential to profoundly change the world.
- Making mobile BI applications a reality: Key steps to take
  
  In a podcast, BI expert William McKnight discusses best practices and action items for managing deployments of mobile business intelligence tools.
- Get execs to get it on the business value a BI program can bring
  
  Backing from top executives can be crucial on business intelligence projects, and BI managers shouldn't shy away from the challenge of getting them on board.
Security
- IT certification guide: Vendor-specific information security certifications
  
  Experts Ed Tittel and Mary Lemons provide a 2013 overview of vendor-specific information security certifications available.
- Introduction: Vendor-neutral security certifications for your career path
  
  Ed Tittel and Mary Lemons offer the definitive primer for vendor-neutral security certifications in 2013.
- SearchSecurity.com's IT security certifications guide
  
  Afraid of making a wrong turn in your career? Our newly updated 2013 guide to information security certifications maps out all your options.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.

All Rights Reserved,Copyright 2009 - 2013, TechTarget