Answers to your tech questions
Computer forums for help with removing malicious software (malware) and improving computer security

Welcome Guest to What the Tech! ( Log In | Register ) We specialize in the removal of malicious software (malware), but here you'll find free help and support for all your tech questions. We invite you to ask questions, share experiences, and learn. Explore our message boards, or register now to post messages of your own. Please Start Here. Register today (registration removes advertising)

 
Reply to this topicStart new topic
> Flash Player workaround - Clickjacking issue
AplusWebMaster
post Oct 8 2008, 05:03 AM
Post #1


AplusWebMaster
*****

Group: Authentic Member
Posts: 3,571
Joined: 30-December 03
From: USA
Member No.: 1,643
Operating System: WinXP



FYI...

- http://www.adobe.com/support/security/advi.../apsa08-08.html
Release date: October 7, 2008
Vulnerability identifier: APSA08-08
Platform: All Platforms
Affected Software: Adobe Flash Player 9.0.124.0 and earlier
...To prevent this potential issue, customers can change their Flash Player settings as follows:
1. Access the Global Privacy Settings panel of the Adobe Flash Player Settings Manager at the following URL: http://www.adobe.com/support/documentation..._manager02.html
2. Select the "Always deny" button.
3. Select ‘Confirm’ in the resulting dialog.
4. Note that you will no longer be asked to allow or deny camera and / or microphone access after changing this setting. Customers who wish to allow certain sites access to their camera and/or microphone can selectively allow access to certain sites via the Website Privacy Settings panel of the Settings Manager at the following URL: http://www.adobe.com/support/documentation..._manager06.html ...
---

- http://blogs.adobe.com/psirt/2008/10/click...y_advisory.html
October 7, 2008

- http://secunia.com/advisories/32163
Release Date: 2008-10-08

- http://web.nvd.nist.gov/view/vuln/detail?v...d=CVE-2008-4503
Last revised: 10/11/2008

//

This post has been edited by AplusWebMaster: Oct 13 2008, 03:54 PM
Reason for edit: Added other references...
Go to the top of the page
 
+Quote Post
AplusWebMaster
post Oct 16 2008, 07:44 AM
Post #2


AplusWebMaster
*****

Group: Authentic Member
Posts: 3,571
Joined: 30-December 03
From: USA
Member No.: 1,643
Operating System: WinXP



FYI...

Adobe Flash Player v10.0.12.36 released
- http://www.adobe.com/go/getflashplayer
October 15, 2008

Flash Player update available to address security vulnerabilities
- http://www.adobe.com/support/security/bull.../apsb08-18.html
Release date: October 15, 2008 ...
CVE number: CVE-2007-6243, CVE-2008-3873, CVE-2007-4324, CVE-2008-4401, CVE-2008-4503
Platform: All Platforms
Summary: Potential vulnerabilities have been identified in Adobe Flash Player 9.0.124.0 and earlier that could allow an attacker who successfully exploits these potential vulnerabilities to bypass Flash Player security controls. Adobe recommends users update to the most current version of Flash Player available for their platform...
Affected software versions: Adobe Flash Player 9.0.124.0 and earlier...

> http://forums.whatthetech.com/_t96126.html...st&p=493052

Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 


RSS Time is now: 23rd November 2008 - 08:47 AM
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy