National Cyber Alert System Cyber Security Alert SA08-149A
Exploitation of Adobe Flash Vulnerability
Original release date: May 28, 2008
Last revised: --
Source: US-CERT
Systems Affected
Microsoft Windows, Apple Mac OS X, and other operating systems that use Adobe Flash Player
Overview
A vulnerability that affects Adobe Flash Player is being actively exploited to install malicious software.
Solution
Apply Updates
Adobe has provided updates to remedy these vulnerabilities. To obtain the updates, visit the Adobe Player Download Center.
Description
Adobe Flash Player is affected by multiple vulnerabilities. If you open a malicious Flash file, which may be hosted on a website, an attacker may be able to take control of your computer or cause it to crash. The Adobe Security Bulletin provides updates that address these vulnerabilities.
This issue was first published in US-CERT Cyber Security Alert SA08-100A. However, recent reports indicate that at least one of these vulnerabilities is being actively exploited at the time of this document's publication.
For more technical information, see US-CERT Technical Cyber Security Alert TA08-149A.
