Macromedia Flash Crash
Buffer overflow bug fixed
Posted in Security, 19th December 2002 12:38 GMT
Free whitepaper – Certify your software integrity with Thawte code signing certificates
A buffer overrun flaw in Macromedia Flash can be used to inject malicious code into target systems.
Potential attackers could try to persuade victims to download maliciously altered versions of Macromedia Flash movies (SWF) but there's still a risk there as crackers are hardly adverse to disguising Trojan code as prOn download or Warez. Unusually, the vulnerability affects users of multiple operating systems (Windows, Unix, Mac) who use Macromedia's application.
However there is a fix, available as a link from Macromedia's minimalist description of the problem here.
A fuller description can be obtained from an eEye advisory. ®
Free whitepaper – Securing your Apache web server with a Thawte digital certificate


The best practices guide for application security
Reducing messaging and web security costs with managed services
Avoiding 7 common mistakes of IT security compliance
Certify your software integrity with Thawte code signing certificates
The future of SaaS and IT infrastructure management
Feds: Hospital hacker's 'massive' DDoS averted
Microsoft knew of nasty IE bug a year before attacks
BlockMaster SafeStick hardware-encrypted USB drive