Alert GCSA-11081 - Vulnerabilita' in Adobe Flash Player

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

       Alert ID : GCSA-11081
           Data : 11 Novembre 2011
         Titolo : Vulnerabilita' in Adobe Flash Player

******************************************************************


:: Descrizione del problema:

    Sono state scoperte varie vulnerabilita' in Adobe Flash Player
    che potrebbero essere sfruttate per aggirare restrizioni di sicurezza
    e compromettere un sistema affetto.


:: Software interessato:

    Adobe Flash Player versioni 11.0.1.152 e precedenti per Windows, Macintosh, Linux, e Solaris
    Adobe Flash Player versioni 11.0.1.153 e precedenti per Android
    Adobe AIR versioni 3.0 per Windows, Macintosh, e Android


:: Impatto:

    Accesso al sistema
    Security Bypass
    Esecuzione di codice arbitrario.


:: Soluzioni:

    Aggiornare Adobe Flash Player alla versione aggiornata:
    http://get.adobe.com/it/flashplayer/


:: Riferimenti:

    Adobe (APSB11-28):
    http://www.adobe.com/support/security/bulletins/apsb11-28.html

    Secunia:
    http://secunia.com/advisories/46818/

    Mitre CVE:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2445
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2450
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2451
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2452
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2453
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2454
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2455
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2456
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2457
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2458
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2459
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2460

-----BEGIN PGP SIGNATURE-----

iQCVAwUBTr0RsvOB+SpikaiRAQLsUAP+JuR3y0NpbBoqXIrlVFMD2MwFyty1C713
X65YQjI+qt6OxFtrrVcnWTx2YI0WVuMzRqw0g+wztZXU5aEH8yzK1vozGgHF0mUW
iOkd49jRQTdhyFr2kDZY/SnmTVD5H5m0mrgfozscdZGa2Xh0ToeVKCLBjg7s7oUo
pPOcaCe7XJY=
=6urs
-----END PGP SIGNATURE-----