Schwachstelle in Flash Player 7 Versionen/ 7.0.60.0 oder früher

#1 Auf Grund der hohen Verbreitung hier mal diese Nachricht.
Ein Update auf Flash Player 8 version 8.0.22.0, welche das Problem behebt, ist verfügbar.

Zitat

Advisory ID : FrSIRT/ADV-2005-2368
CVE ID : GENERIC-MAP-NOMATCH
Rated as : Critical
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-11-09


Technical Description

A critical vulnerability has been identified in Microsoft Windows, which may be exploited by remote attackers to execute arbitrary commands. This issue is due to a memory corruption error in Macromedia Flash Player, a third party application redistributed with Microsoft Windows, which could be exploited by remote attackers to compromise a vulnerable system by convincing a user to visit a specially crafted Web page or open a malicious Flash file. For additional information, see : FrSIRT/ADV-2005-2317

Note : Macromedia Flash Player was redistributed with Microsoft Windows XP Service Pack 1, Windows XP Service Pack 2, Windows 98, Windows 98 SE, and Windows Millennium Edition.

Affected Products

Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 1
Microsoft Windows XP Service Pack 2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003
Microsoft Windows Server 2003 (Itanium)
Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows Server 2003 with SP1 (Itanium)
Microsoft Windows Server 2003 x64 Edition
Microsoft Windows 98
Microsoft Windows 98 Second Edition (SE)
Microsoft Windows Millennium Edition (ME)

Solution

Upgrade to Flash Player 8 version 8.0.22.0 or Flash Player 7 versions 7.0.60.0 or later :
http://www.macromedia.com/go/getflash

References

http://www.frsirt.com/english/advisories/2005/2368
http://www.microsoft.com/technet/security/advisory/910550.mspx

ChangeLog

2005-11-09 : Original Advisory

Quelle: http://www.frsirt.com
__________
Durchsuchen --> Aussuchen --> Untersuchen

#2 Zur Ergänzung: Es exisitert mittlerweile ein Exploit für diese Schwachstelle.
__________
Durchsuchen --> Aussuchen --> Untersuchen