Flash Player Security Issues

This section describes potential security issues on Adobe Flash Player.

Like any other Web browser plugin programs, Adobe Flash Player is a potential security hole on your computer system for virus and other malware attacks.

Here are some examples of recently reported security issues on Adobe Flash Player:

June 5, 2010 - "Adobe reports 'critical' flaw in Flash, Acrobat" by cnet.com:

Adobe has issued a security advisory about a "critical" vulnerability in its Flash Player and Adobe Reader and Acrobat products that it says could let attackers take control of people's computers.

The company said late Friday that there had been reports of the hole actually being exploited and that an official patch was not yet available.

Affected software includes: Adobe Flash Player 10.0.45.2, 9.0.262, and earlier 10.0.x and 9.0.x versions for Windows, Macintosh, Linux, and Solaris.

...

July 22, 2009 - "Vulnerability Note VU#259425 - Adobe Flash vulnerability affects Flash Player and other Adobe products" by cert.org:

Overview: Adobe Flash contains a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Adobe Flash Player, Reader, Acrobat, and other products that include Flash support are affected.

This vulnerability affects Adobe Flash versions 9.0.159.0 and 10.0.22.87 and earlier 9.x and 10.x versions. Adobe Reader 9, Acrobat 9, and other Adobe products (including Photoshop CS3, PhotoShop Lightroom, Freehand MX, Fireworks) provide Flash support independent of Flash Player.

...

To see latest reported security issues, you should visit the Flash Player section of "Security bulletins and advisories" page at adobe.com.

Table of Contents

 About This Book

Introduction of Adobe Flash

 What Is Flash?

 Using Flash to Provide Interactivity

 Using Flash to Provide Multimedia

Flash Player Security Issues

 Adobe Flash Player Plugin for Firefox

 Adobe Flash Player Plugin for Chrome

 Adobe Flash Player Plugin for Safari

 Adobe Flash Player ActiveX for IE

 Using "object" Elements for Flash Files

 Using "embed" Elements for Flash Files

 "mp3player" - MP3 Music Player

 SWFObject - Hidding "object" behind JavaScript

 Flash Player Projector

 SWFTools - SWF File Manipulation Tools

 SWFC Script to Generate Flash SWF Files

 ActionScript Embedded in SWFC Script

 AS3Compile - ActionScript 3 Compiler

 Adobe Flex SDK 4

 SWF File Structure and Tags

 SWF File Processing Rules

 SWF Files for Video and Audio Streams

 Outdated Tutorials

 References

 Full Version in PDF/EPUB