Microsoft Windows, Apple Mac OS X, and other operating systems that use Adobe Flash Player
A vulnerability that affects Adobe Flash Player is being actively exploited to install malicious software.
Apply Updates
Adobe has provided updates to remedy these vulnerabilities. To obtain the updates, visit the Adobe Player Download Center.
Adobe Flash Player is affected by multiple vulnerabilities. If you open a malicious Flash file, which may be hosted on a website, an attacker may be able to take control of your computer or cause it to crash. The Adobe Security Bulletin provides updates that address these vulnerabilities.
This issue was first published in US-CERT Cyber Security Alert SA08-100A. However, recent reports indicate that at least one of these vulnerabilities is being actively exploited at the time of this document's publication.
For more technical information, see US-CERT Technical Cyber Security Alert TA08-149A.
- US-CERT Technical Cyber Security Alert TA08-149A.html - <http://www.us-cert.gov/cas/techalerts/TA08-149A.html>
- Securing Your Web Browser - <http://www.us-cert.gov/reading_room/securing_browser/>
- Adobe PSIRT Potential Flash Player Issue - update - <http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue_u_1.html>
- Adobe Security Advisory APSB08-011 - <http://www.adobe.com/support/security/bulletins/apsb08-11.html>
- Adobe Flash Player Download Center - <http://www.adobe.com/go/getflash>
- US-CERT Vulnerability Notes for Adobe Security advisory APSB08-011 - <http://www.kb.cert.org/vuls/byid?searchview&query=APSB08-011>
Feedback can be directed to US-CERT.
Produced 2008 by US-CERT, a government organization. Terms of use
Revision History
May 28, 2008: Initial release