Adobe Flash Player URL Parsing Heap Overflow Vulnerability
12 Aug. 2009
Summary
Adobe Flash Player is a cross-platform browser plug-in that delivers interactive content for Web experiences. Remote exploitation of a heap overflow vulnerability in Adobe Systems Inc's Flash Player could allow an attacker to execute arbitrary code with the privileges of the current user.
Vulnerable Systems:
* Adobe Flash Player 10.0.22.87
When a specifically crafted URL is passed to Flash Player, a heap overflow can occur and could result in arbitrary code execution.
Exploitation of this vulnerability allows the attacker to execute arbitrary code with the privileges of the current user. To exploit this vulnerability, a targeted user must load a malicious Web page created by an attacker. An attacker typically accomplishes this via social engineering techniques or injecting content into compromised, trusted sites.
Patch Availability:
Adobe has released an update which addresses this issue. For more information, consult their advisory (APSB09-10) at the following URL: http://www.adobe.com/support/security/bulletins/apsb09-10.html
