Systems Affected

• Adobe Flash Player 10.0.45.2 and earlier 10.x versions
• Adobe Flash Player 9.0.262 and earlier 9.x versions
• Adobe Reader 9.3.2 and earlier 9.x versions
• Adobe Acrobat 9.3.2 and earlier 9.x versions

Other Adobe products that support Flash may also be vulnerable.

Overview

According to Adobe, there is a vulnerability in Adobe Flash. This vulnerability affects Flash Player, Reader, Acrobat, and possibly other products that support Flash. A remote attacker could exploit this vulnerability to execute arbitrary code.

I. Description

Adobe Security Advisory describes a vulnerability in Adobe Flash that affects Flash Player, Reader, and Acrobat. It may also affect other products that independently support Flash, such as Photoshop, Photoshop Lightroom, Freehand MX, and Fireworks.

An attacker could exploit this vulnerability by convincing a user to open specially crafted Flash content. Flash content is commonly hosted on a web page, but it can also be embedded in PDF and other documents or provided as a stand-alone file.

"There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat."

For more information visit:

UNITED STATES COMPUTER EMERGENCY READINESS TEAM