| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 16 Jun 2010 11:03:42 +0200 From: "VUPEN Security Research" <advisories@...en.com> To: <bugtraq@...urityfocus.com> Subject: VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167) VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167) http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Flash Player is a cross-platform browser-based application runtime that delivers uncompromised viewing of expressive applications, content, and videos across screens and browsers. Flash Player delivers breakthrough web experiences to over 98% of Internet users." from Adobe.com II. DESCRIPTION --------------------- VUPEN Vulnerability Research Team discovered two critical vulnerabilities in Adobe Flash Player. These vulnerabilities are caused due to heap overflows when processing malformed GIF or JPEG data within a Flash file, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page. III. AFFECTED PRODUCTS --------------------------- Adobe Flash Player versions prior to 10.1.53.64 Adobe Flash Player versions prior to 9.0.277.0 IV. Binary Analysis & Proof-of-concept --------------------------------------- In-depth binary analysis, code execution exploits and proof-of-concept codes are available through the VUPEN Binary Analysis & Exploits Service : http://www.vupen.com/exploits/ V. SOLUTION ---------------- Upgrade to Flash Player version 10.1.53.64 or 9.0.277.0 : http://www.adobe.com/go/getflash VI. CREDIT -------------- These vulnerabilities were discovered by Nicolas Joly of VUPEN Security VII. ABOUT VUPEN Security --------------------------- VUPEN is a leading IT security research company providing vulnerability management and security intelligence solutions which enable enterprises and institutions to eliminate vulnerabilities before they can be exploited, ensure security policy compliance and meaningfully measure and manage risks. Governmental and federal agencies, and global enterprises in the financial services, insurance, manufacturing and technology industries rely on VUPEN to improve their security, prioritize resources, cut time and costs, and stay ahead of the latest threats. * VUPEN Vulnerability Notification Service (VNS) : http://www.vupen.com/english/services/ * VUPEN Binary Analysis & Exploits Service (BAE) : http://www.vupen.com/exploits/ * VUPEN Threat Protection Program (TPP) : http://www.vupen.com/english/tpp/ * VUPEN Web Application Security Scanner (WASS) : http://www.vupen.com/english/wass/ VIII. REFERENCES ---------------------- http://www.vupen.com/english/advisories/2010/1421 http://www.adobe.com/support/security/bulletins/apsb10-14.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2167 IX. DISCLOSURE TIMELINE ----------------------------- 2010-01-15 - Vendor notified 2010-01-15 - Vendor response 2010-04-16 - Status update received 2010-06-02 - Status update received 2010-06-11 - Coordinated public Disclosure
Powered by blists - more mailing lists