Information Security Advisory ITS Security Office – BGSU 4/10/2008
Adobe Flash Player, used in many web browsers, multiple critical vulnerabilities. Upgrade to Flash Player 9.0.124.0
Systems Affected All BGSU web browser users. Can affect all Windows, Mac, Unix & Linux operating systems.
Overview Flash Player can be installed as a web browser helper application to play multimedia content. Recently multiple critical
vulnerabilities were discovered and Adobe released updates on 4/9/08.
Description The vulnerabilities create an attack vector for attackers. Attacks are possible by physical access, by network or visiting
malicious websites.
Impact Loss of sensitive and personal information. System compromise, even from fully patched operating systems.
Solutions Update Adobe Flash Player to version 9.0.124.0 below or here.
Other recommendations Keep all system software constantly updated, avoid un-trusted websites.
Additional Information Adobe Flash Download Center Secunia Advisory Adobe fixes multiple flaws in Flash Player - Afterdawn News - 4/9/08
DISCLAIMER: Information Security Advisories and related resources provide technical and administrative advice to protect sensitive information
on the University network and to help BGSU comply with regulations pertaining to information security. Failure to comply
with these advisories may directly or indirectly increase the risk of exposure or compromise of sensitive University information.
These advisories and resources do not provide legal advice – contact the BGSU Office of General Counsel or other appropriate
legal advisor for interpretations of regulations.
|