Adobe Systems Inc. has
patched a number of critical vulnerabilities in its Flash media player that
could be used by attackers to take over an affected system.
Attackers could theoretically exploit the bugs by tricking a user into
loading a maliciously encoded Flash movie file, which would have a .swf
extension. The vulnerabilities can be found in Flash Player version 8.0.22 or
earlier; the Breeze Meeting, version 5.1 and earlier; as well as the Shockwave
player, version 10.1.0.11 and earlier. Adobe's advisory credits
Microsoft with discovering the vulnerabilities, but both the Windows and the
Macintosh OS X operating systems are affected by the problem, according to
Adobe.
