Adobe Flash Player Unspecified Remote Code Execution Vulnerability
RISK: Medium Risk
A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by an unspecified memory corruption error when processing a malformed SWF file, which could be exploited by attackers to crash an affected browser or execute arbitrary code by tricking a user into visiting a specially crafted web page.
Note:
It has been observed that this issue is being actively exploited in the wild.Continued investigation reveals that this issue is fairly widespread. Malicious code is being injected into other third-party domains, most likely through SQL-injection attacks. The code then redirects users to sites hosting malicious Flash files exploiting this issue.
Impact
- Remote Code Execution
System / Technologies affected
- Adobe Flash Player version 9.0.124.0 and prior
Solutions
There is no patch available for this vulnerability currently.
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with