gHacks technology news » flash vulnerability http://www.ghacks.net A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas. Wed, 25 Nov 2009 11:56:41 +0000 http://wordpress.org/?v=2.8.6 en hourly 1 Adobe Flash Player Clickjacking Vulnerability http://www.ghacks.net/2008/10/08/adobe-flash-player-clickjacking-vulnerability/ http://www.ghacks.net/2008/10/08/adobe-flash-player-clickjacking-vulnerability/#comments Wed, 08 Oct 2008 12:18:22 +0000 Martin http://www.ghacks.net/?p=7493 Dante send me a link to an interesting article that described the latest Adobe Flash Player vulnerability. Adobe published a security advisory yesterday that described a clickjacking vulnerability. In short: An attacker could lure the unsuspecting user into clicking on a link that would give the attacker access to the computer’s microphone and webcam without the user’s knowledge.

Adobe published a temporary workaround to protect the computer system against this form of attack that users should apply until the release of a patch that would fix the critical issue.

To apply the workaround users should visit the Flash Player’s Settings Manager by following the link. There they should click on the Always Deny button which would prevent any website from accessing the microphone and webcam settings.

adobe flash player settings manager

The new setting has to be confirmed in the popup that appears automatically after clicking on the Always deny button. The patch is said to be available before the end of October.

Tags: , , , , ,

Related posts

]]> http://www.ghacks.net/2008/10/08/adobe-flash-player-clickjacking-vulnerability/feed/ 1 Vulnerabilities in latest Flash version http://www.ghacks.net/2008/05/28/vulnerabilities-in-latest-flash-version/ http://www.ghacks.net/2008/05/28/vulnerabilities-in-latest-flash-version/#comments Wed, 28 May 2008 17:44:12 +0000 Martin http://www.ghacks.net/?p=4383 A recent vulnerability in the latest Adobe Flash version lead to a massive attack. More than 220000 pages on the Internet have been hacked most likely with an automated tool using a SQL injection attack. Those pages, some of well respected companies such as Nokia but also many non-profit organizations and town websites, redirect the user to websites that host the exploits for the Flash vulnerability.

If the system meets the requirements the exploit is used to download and execute trojans that steal information and droppers that download additional trojans. Information that are stolen are for example World of Warcraft account information while the droppers download files that add the computer to a botnet. (according to Trendmicro)

Most antivirus companies have already updated their software to disable the possibility that this exploit can be used on the computer the software is running on. Your best bet if you do not use antivirus software is to either disable Flash for now or use an extension like NoScript to block Flash on every domain but trusted ones.

Tags: , , ,

Related posts

]]> http://www.ghacks.net/2008/05/28/vulnerabilities-in-latest-flash-version/feed/ 4