Adobe plugs multi-platform Flash vulns

Adobe has published an update fixing numerous security vulnerabilities in Adobe Flash.

Earlier versions of Flash prior to 9.0.115.0 on multiple platforms (Mac OS, Linux, Windows) are subject to various security bugs that create the possibility of all sorts of mischief, including cross-site scripting attacks and information disclosure attacks. Denial of service or code injection attacks may also be possible. Several of the issues addressed involve input validation errors, which could allow an attacker to execute arbitrary code after tricking users of vulnerable Flash clients into opening content on maliciously-constructed websites.

Separately Adobe also patched bugs in its GoLive HTML editor. Exploitation of the bugs involves tricking a user into including crafted BMP, DIB, RLE or PNG content into a GoLive document. That's not the easiest exploit scenario but, since the flaws carry the possibility of injecting malicious code onto vulnerable systems, worth guarding against nonetheless. ®