Macromedia Flash Player Arbitrary Code Execution

A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user’s system [emphasis added].

The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used as an index in Flash.ocx to reference an array of function pointers. This can be exploited via a specially crafted SWF file to cause the index to reference memory that is under the attacker’s control, which causes Flash Player to use attacker supplied values as function pointers.

The vulnerability also affects libflashplayer.so on the Unix platform.

Successful exploitation allows execution of arbitrary code.

The vulnerability has been reported in Flash Player version 7.0.19.0 and prior on the Windows platform, and in versions prior to 7.0.25.0 on the Unix platform.

Solution: Update to Flash Player 8 (8.0.22.0) or apply Flash Player 7 update (7.0.61.0 or 7.0.60.0).

Flash Player 8 download

Flash Player 7 update

[Continue reading Secunia Advisory SA17430]

[tags]windows,linux,unix,vulnerability,flash player 7,compromise,arbitrary,code execution[/tags]