Adobe Macromedia Flash Player unspecified SWF code execution
| macromedia-swf-code-execution (25005) |  High Risk |
Description:
Macromedia Flash Player and various other Macromedia products could allow a remote attacker to execute arbitrary code on a victim's system, caused by multiple unspecified vulnerabilities regarding the handling of SWF files. A remote attacker could exploit this vulnerability by creating a malicious SWF file and hosting it on a Web site or sending it to a potential victim as an email attachment, which could allow the attacker to execute arbitrary code on the victim's system, if the victim can be persuaded to open the malicious file.
Platforms Affected:
- Apple, Mac OS X 10.3.9
- Apple, Mac OS X 10.4.11
- Apple, Mac OS X 10.4.6
- Apple, Mac OS X 10.5.1
- Apple, Mac OS X Server 10.3.9
- Apple, Mac OS X Server 10.4.11
- Apple, Mac OS X Server 10.4.6
- Apple, Mac OS X Server 10.5.1
- Gentoo, Linux
- Macromedia, Breeze 5.1
- Macromedia, Flash Player 4.0_r12
- Macromedia, Flash Player 5.0
- Macromedia, Flash Player 5.0_r50
- Macromedia, Flash Player 6.0
- Macromedia, Flash Player 6.0.29.0
- Macromedia, Flash Player 6.0.40.0
- Macromedia, Flash Player 6.0.47.0
- Macromedia, Flash Player 6.0.65.0
- Macromedia, Flash Player 6.0.79.0
- Macromedia, Flash Player 7.0.19.0
- Macromedia, Flash Player 7.0.60.0
- Macromedia, Flash Player 7.0.61.0
- Macromedia, Flash Player 7.0_r19
- Macromedia, Flash Player 8.0.22.0
- Macromedia, Shockwave
- Microsoft, Windows 2000 SP4
- Microsoft, Windows 2003 Server SP1
- Microsoft, Windows XP SP2
- Microsoft, Windows XP x64-Professional
- Microsoft, Windows XP SP1
- Novell, Linux Desktop 9
- RedHat, RHEL Extras 3
- RedHat, RHEL Extras 4
- SuSE, SuSE Linux 10.0
- SuSE, SuSE Linux 9.1
- SuSE, SuSE Linux 9.2
- SuSE, SuSE Linux 9.3
Remedy:
Refer to Adobe Product Security Bulletin APSB06-03 or Microsoft Security Advisory (916208) for patch, upgrade, or suggested workaround information. See References.
For Microsoft Windows:
Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS06-020. See References.
For Windows XP:
Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS06-069. See References.
Note: Microsoft originally provided a workaround for this vulnerability in MS06-020, but it was superseded by the patch released with MS06-069.
For Red Hat Linux:
Refer to RHSA-2006:0268-5 for patch, upgrade, or suggested workaround information. See References.
For Gentoo Linux:
Refer to Gentoo Linux Security Announcement GLSA 2006-03-20 for patch, upgrade, or suggested workaround information. See References.
For SUSE Linux:
Refer to SUSE Security Announcement SUSE-SA:2006:015 for patch, upgrade, or suggested workaround information. See References.
For other distributions:
Apply the appropriate update for your system. See References.
Consequences:
Gain Access
References:
- Adobe Product Security Bulletin APSB06-03, Flash Player Update to Address Security Vulnerabilities at http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html.
- Apple Security Update 2006-003, About Security Update 2006-003 at http://docs.info.apple.com/article.html?artnum=61798.
- Apple Web site, About Security Update 2007-009 v1.1 at http://docs.info.apple.com/article.html?artnum=307224.
- Apple Web site, About Security Update 2007-009 at http://docs.info.apple.com/article.html?artnum=307179.
- BugTraq Mailing List, Mon Dec 17 2007 - 15:47:29 CST, Apple OS X Software Update Remote Command Execution at http://archives.neohapsis.com/archives/bugtraq/2007-12/0217.html.
- Microsoft Security Advisory (916208), Adobe Security Bulletin: APSB06-03 Flash Player Update to Address Security Vulnerabilities at http://www.microsoft.com/technet/security/advisory/916208.mspx.
- Microsoft Security Bulletin MS06-020, Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (913433) at http://www.microsoft.com/technet/security/Bulletin/MS06-020.mspx.
- Microsoft Security Bulletin MS06-069, Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789) at http://www.microsoft.com/technet/security/bulletin/ms06-069.mspx.
- US-CERT Technical Cyber Security Alert TA06-075A, Adobe Macromedia Flash Products Contain Vulnerabilities at http://www.us-cert.gov/cas/techalerts/TA06-075A.html.
- ASA-2006-071: flash-plugin security update (RHSA-2006-0268)
- ASA-2006-099: Windows Security Updates for May 2006 - (MS06-018 - MS06-020)
- BID-17106: Macromedia Flash Multiple Unspecified Security Vulnerabilities
- BID-17951: Apple Mac OS X Security Update 2006-003 Multiple Vulnerabilities
- CVE-2006-0024: Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.
- FrSIRT/ADV-2006-0952: Macromedia Products Unspecified Remote Command Execution Vulnerabilities
- FrSIRT/ADV-2006-1262: Opera Security Update Fixes Flash Plugin Command Execution Vulnerability
- FrSIRT/ADV-2006-1744: Microsoft Windows Flash Player Remote Code Execution Vulnerabilities (MS06-020)
- FrSIRT/ADV-2006-1779: Apple Mac OS X Multiple Remote and Client-Side Code Execution Vulnerabilities
- FrSIRT/ADV-2007-4238: Apple Mac OS X Code Execution and Information Disclosure Vulnerabilities
- GLSA-200603-20: Macromedia Flash Player: Arbitrary code execution
- OSVDB ID: 23908: Macromedia Flash Player swf Processing Multiple Unspecified Code Execution
- RHSA-2006-0268: flash-plugin security update
- SA19218: Flash Player Unspecified Code Execution Vulnerabilities
- SA20045: Microsoft Windows Flash Player Code Execution Vulnerabilities
- SA20077: Mac OS X Security Update Fixes Multiple Vulnerabilities
- SA28136: Apple Mac OS X Security Update Fixes Multiple Vulnerabilities
- SECTRACK ID: 1015770: Macromedia Flash Player SWF File Processing Flaw Permits Remote Code Execution
- SUSE-SA:2006:015: flash-player remote buffer overflow
- SUSE-SR:2006:006: SUSE Security Summary Report
- US-CERT VU#945060: Adobe Flash products contain multiple vulnerabilities
Reported:
Mar 14, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net