Home › News › Software
Critical vulnerability found in Adobe Flash Player
The vulnerability (CVE-2009-1862) could cause a crash and allow an attacker to gain control of the compromised system. It is reportedly being exploited in targeted attacks against Adobe Reader v9 on Windows. Naturally, a fix is in the works and is expected to be delivered by the end of the week.
For the time being, users can mitigate the threat by deleting, renaming or removing access to authplay.dll. Doing so will cause your program to crash when attempting to view a PDF containing SWF content, however. Adobe is also recommending that users enable UAC and that they avoid untrusted websites using Flash.
User Comments (6)
Post a comment|
Guest
on July 27, 2009 1:46 PM |
"...avoid untrusted websites using Flash" What about flash ads in trusted websites? Can they be compromised? |
|
Guest
on July 27, 2009 4:56 PM |
Could someone post a more layman way of fixing this issue? |
|
TechCombo
on July 27, 2009 5:36 PM |
Adobe published this in their post, “A critical vulnerability exists in the current versions of Flash Player (v9.0.159.0 and v10.0.22.87) for Windows, Macintosh and Linux operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat v9.x for Windows. This vulnerability (CVE-2009-1862) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild via limited, targeted attacks against Adobe Reader v9 on Windows.” Thus, you should just remove the authplay.dll file and you are sorted. |
|
tengeta
on July 27, 2009 5:37 PM |
Maybe ridding of Adobe as a whole would fix the issue. |
|
raybay
on July 27, 2009 10:36 PM |
Adobe already has a fix available online... which is more than can be said for most others that are infested. |
|
Guest
on July 28, 2009 1:22 AM |
just got new laptop am trying to download flash player, but it will not even load the page. Is this threat the cause of my problem? |
Most Popular
| Trending | Featured |
-
iOS 5.1.1 untethered jailbreak tool released, supports 4S, iPad 3
-
After five days, Facebook ranks as worst IPO flop of the decade
-
Rumor: Windows 8 RC will launch June 1, will ship with Adobe Flash
-
Rumor: AMD "Piledriver" FX CPU production to begin Q3 2012
-
Is Apple's USB wall adapter really worth $29?
Editors' Smartphone Picks
Subscribe to TechSpot
Get free exclusive content, learn about new features and tech breaking news.
