Alert GCSA-10100 - Vulnerabilita' in Adobe Flash Player

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

     Alert ID : GCSA-10100
         Data : 11 agosto 2010
       Titolo : Vulnerabilita' in Adobe Flash Player

******************************************************************

:: Descrizione del problema

Sono state identificate vulnerabilita' multiple in Adobe Flash Player, che 
potrebbero essere sfruttate per condurre attacchi di tipo click-jacking o per 
compromettere un sistema utente.


:: Software interessato

Adobe AIR 2.x
Adobe Flash CS3
Adobe Flash CS4
Adobe Flash Player 10.x
Adobe Flash Professional CS5
Adobe Flex 3.x
Adobe Flex 4.x


:: Impatto

Esecuzione remota di codice arbitrario
Possibile compromissione del sistema


:: Soluzioni

Aggiornare Flash Player all'ultima versione
http://get.adobe.com/it/flashplayer/


:: Riferimenti

Security Advisory for Flash Player, Adobe Reader and Acrobat
http://www.adobe.com/support/security/bulletins/apsb10-16.html


VUPEN
http://www.vupen.com/english/advisories/2010/2064

Secunia
http://secunia.com/advisories/40907/

Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0209
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2188
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2214
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2215
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2216
-----BEGIN PGP SIGNATURE-----

iQCVAwUBTGKpkPOB+SpikaiRAQKCOgP6A+IZB4AlUAZMviL5fCMIS69H1MMYm3+5
PLql/s1/nO23ioQEvTBW5ouDdyUBwgg763p04ijyqgLtGT1Y7cqg+6t6lF2nssoh
bcC8Z+zL9qnC8VkMpo1aG5TimEySQjFjZ1kEVe3NMfzno7W8HbvAr1m881CxvzIo
BvHMnlGE3wo=
=QCwM
-----END PGP SIGNATURE-----