Hackers exploiting Flash Player XSS vulnerability
By Ryan Naraine | June 6, 2011, 10:15am PDT
Adobe has released another Flash Player update to fix a serious security vulnerability that could expose Windows, Mac OS X, Linux and Solaris users to cross-site scripting attacks.
“This universal cross-site scripting vulnerability (CVE-2011-2107) could be used to take actions on a user’s behalf on any website or webmail provider, if the user visits a malicious website,” Adobe warned in an advisory.
The release of this Flash Player patch follows reports that the vulnerability is being exploited in the wild in active targeted attacks.
In the targeted attacks, Adobe said users are being tricked into clicking on a malicious link delivered in an email message.
More:
Hackers exploiting Flash Player XSS vulnerability | ZDNet
Update:
Adobe - Security Bulletins: APSB11-13 - Security Update available for Adobe Flash Player
By Ryan Naraine | June 6, 2011, 10:15am PDT
Adobe has released another Flash Player update to fix a serious security vulnerability that could expose Windows, Mac OS X, Linux and Solaris users to cross-site scripting attacks.
“This universal cross-site scripting vulnerability (CVE-2011-2107) could be used to take actions on a user’s behalf on any website or webmail provider, if the user visits a malicious website,” Adobe warned in an advisory.
The release of this Flash Player patch follows reports that the vulnerability is being exploited in the wild in active targeted attacks.
In the targeted attacks, Adobe said users are being tricked into clicking on a malicious link delivered in an email message.
More:
Hackers exploiting Flash Player XSS vulnerability | ZDNet
Update:
Adobe - Security Bulletins: APSB11-13 - Security Update available for Adobe Flash Player