Adobe Flash Player 6 Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	37753
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 12 2010 12:00AM
Updated:	Jan 13 2010 05:11PM
Credit:	Will Dormann, Carsten Eiram and Dyon Balding and Microsoft
Vulnerable:	Macromedia Flash 6.0.79 .0 Macromedia Flash 6.0.65 .0 Macromedia Flash 6.0.47 .0 Macromedia Flash 6.0.40 .0 Macromedia Flash 6.0.29 .0 Macromedia Flash 6.0 + Microsoft Internet Explorer 5.0.1 SP2 + Microsoft Internet Explorer 5.0.1 SP2 + Microsoft Internet Explorer 5.0.1 SP1 + Microsoft Internet Explorer 5.0.1 SP1 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 + Microsoft Internet Explorer 5.5 SP2 + Microsoft Internet Explorer 5.5 SP1 + Microsoft Internet Explorer 5.5 SP1 + Microsoft Internet Explorer 5.5 preview + Microsoft Internet Explorer 5.5 preview + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.0 + Microsoft Internet Explorer 5.0 + Microsoft Windows XP Embedded SP3 + Microsoft Windows XP Embedded SP2 + Microsoft Windows XP Home SP3 + Microsoft Windows XP Home SP2 + Microsoft Windows XP Media Center Edition SP3 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Professional SP3 + Microsoft Windows XP Professional SP2 + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Tablet PC Edition SP3 + Microsoft Windows XP Tablet PC Edition SP2 + Netscape Communicator 6.1 + Netscape Communicator 6.1 + Netscape Communicator 4.78 + Netscape Communicator 4.78 + Netscape Communicator 4.77 + Netscape Communicator 4.77 + Netscape Communicator 4.76 + Netscape Communicator 4.76 + Netscape Communicator 4.75 + Netscape Communicator 4.75 + Netscape Communicator 4.74 + Netscape Communicator 4.74 + Netscape Communicator 4.73 + Netscape Communicator 4.73 + Netscape Communicator 4.72 + Netscape Communicator 4.72 + Netscape Communicator 4.61 + Netscape Communicator 4.61 + Netscape Communicator 4.51 + Netscape Communicator 4.51 + Netscape Communicator 4.7 + Netscape Communicator 4.7 + Netscape Communicator 4.6 + Netscape Communicator 4.6 + Redhat netscape-common-4.76-11.i386.rpm + Redhat netscape-common-4.78-2.i386.rpm + Redhat netscape-common-4.79-1.i386.rpm + Redhat netscape-communicator-4.76-11.i386.rpm + Redhat netscape-communicator-4.78-2.i386.rpm + Redhat netscape-communicator-4.79-1.i386.rpm + Redhat netscape-navigator-4.76-11.i386.rpm + Redhat netscape-navigator-4.78-2.i386.rpm + Redhat netscape-navigator-4.79-1.i386.rpm Macromedia Flash 6.0.88.0
Not Vulnerable:	Adobe Flash Player 9 Adobe Flash Player 8 Adobe Flash Player 7 Adobe Flash Player 10

Adobe Flash Player 6 Multiple Remote Code Execution Vulnerabilities

Adobe Flash Player 6 is prone to multiple remote code-execution vulnerabilities.

An attacker can exploit these issues to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users.

Adobe Flash Player 6 Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Flash Player 6 Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Adobe Flash Player 6 Multiple Remote Code Execution Vulnerabilities

References:

• Adobe Flash Homepage (Adobe)
  
• Microsoft Security Advisory (979267) (Adobe)
  
• Microsoft Security Advisory 979267 (Microsoft)
  
• Vulnerability Note VU#204889 (US-CERT)