Alert GCSA-06074 - Vulnerabilita' in Adobe Flash Player

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


*****************************************************************************

      Alert ID : GCSA-06074
          Data : 19 Settembre 2006
        Titolo : Vulnerabilita' in Adobe Flash Player

*****************************************************************************


- - Descrizione del problema:

   Sono state identificate varie vulnerabilita' in Adobe Flash Player che,
   tramite un media file SWF creato appositamente, potrebbero consentire
   ad un aggressore remoto di prendere il controllo di un sistema vulnerabile.


- - Piattaforme e Software interessati:

   Adobe Flash Player versione 8.0.24.0 e precedenti
   Adobe Flash Professional 8
   Adobe Flash MX 2004
   Adobe Flex 1.5

   Microsoft Internet Explorer
   Netscape Communicator
   Mozilla Firefox


- - Impatto:

   remote code execution
   privilege escalation
   denial-of-service


- - Soluzioni:

   Aggiornare alla versione 9.0.16.0
   http://www.adobe.com/go/getflashplayer/

   Per conoscere la versione installata
   http://www.adobe.com/products/flash/about/


- - Riferimenti:

   Adobe Security Advisory
   http://www.adobe.com/support/security/bulletins/apsb06-11.html

   SecurityFocus BID
   http://www.securityfocus.com/bid/19980

   Mitre's CVE ID:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3014
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3311
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3587
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3588
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4640

   Microsoft Security Advisory (925143)
   http://www.microsoft.com/technet/security/advisory/925143.mspx

   Red Hat Advisory
   https://rhn.redhat.com/errata/RHSA-2006-0674.html

   Computer Terrorism Security Advisory
   http://www.computerterrorism.com/research/ct12-09-2006.htm

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRRADZPOB+SpikaiRAQK7pAP8DgFmaoBEov/0exMvkOnXgi9kDQsHKv1U
kYD94SdpeMF6vIGBU95klQOPyMvXT+0qYCiCwXC9gu9c0c/8dA09jOGC27xPXZMS
4B7nkCYPX+vl6bm4YGrGUhgvXnYfm4RBf4GQWSR7avOWnwTfU53d0y4W45ii3hTe
PgOSj5lxUt8=
=R6wa
-----END PGP SIGNATURE-----