Vulnerability in Adobe Reader, Acrobat and Flash Player Could Allow Remote Code Execution

Description

A critical vulnerability exists in the current versions of Flash Player (v9.0.159.0 and v10.0.22.87) for Windows, Macintosh and Linux operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat v9.x for Windows, Macintosh and UNIX operating systems, which could allow an attacker to take control of the affected system.

This vulnerability is being actively exploited.

Versions Affected

• Adobe Flash Player 9.0.159.0;
• Adobe Flash Player 10.0.22.87;
• Adobe Acrobat 9.1.2;
• Adobe Reader 9.1.2;
• Previous versions may also be affected;

Vendor Response

Adobe have issued a security advisory, and product updates to Adobe Reader, Acrobat and Flash Player to resolve the relevant security issues.

More Information

• Adobe Security Advisory APSA09-10;
• Adobe Security Advisory APSA09-03;