Alert GCSA-10002 - Vulnerabilita' in Adobe (Macromedia) Flash Player

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

    Alert ID : GCSA-10002
        Data : 13 gennaio 2010
      Titolo : Vulnerabilita' in Adobe (Macromedia) Flash Player 6

******************************************************************


:: Descrizione del problema

    Microsoft ha pubblicato un Security Advisory circa alcune
    vulnerabilita' che riguardano Adobe (Macromedia) Flash Player 6,
    il quale e' fornito con Windows XP.


:: Software interessato

    Windows XP
    Windows XP SP2 e SP3
    Windows XP Pro x64 Edition SP2
    Internet Explorer
    Adobe (Macromedia) Flash Player 6


:: Impatto

    Esecuzione remota di codice arbitrario
    Conquista del controllo sul sistema


:: Soluzioni

    Aggiornare Adobe Flash Player all'ultima versione

    http://get.adobe.com/flashplayer/

    in alternativa rimuovere Adobe Flash Player 6

    http://kb2.adobe.com/cps/141/tn_14157.html

    o disabilitarlo impostando il Killbit

    http://www.kb.cert.org/vuls/id/204889


:: Riferimenti

    Microsoft Security Advisory
    http://www.microsoft.com/technet/security/advisory/979267.mspx

    US-CERT Vulnerability Note
    http://www.kb.cert.org/vuls/id/204889

    US-CERT Alert
    http://www.us-cert.gov/cas/techalerts/TA10-012B.html
    http://www.us-cert.gov/cas/alerts/SA10-012B.html

    Vupen Security
    http://www.vupen.com/english/advisories/2010/0101

    ISC SANS
    http://isc.sans.org/diary.html?storyid=7957

-----BEGIN PGP SIGNATURE-----

iQCVAwUBS03l2POB+SpikaiRAQJ/bQP9EpzWZsebHNNaGazxIrAtsSN5w72t/bI0
G8XaEJBkcnvki1y2M+3qU8yNjnm7FYBpi5ThGYqxAWlL0pQVeOuTsIsbbs7congB
ncWWYEVHf4hZIShOazDlmY4yHGglEzHMtHRUxv2+OwE41MHilrZJN0TKeDkC3mB2
kLRBj/JsSgY=
=TubA
-----END PGP SIGNATURE-----