[Adobe]Security update available for Adobe Flash Player(CVE-2011-2110)

지난 주말에 알려지지 않은 Adobe Flash Player 취약점으로 인하여 악성파일이 유포 된 사례가 있었다.

공식적으로 알려지지 않은 0-Day 여서 감염자가 상당히 많은것으로 확인되었다.

다행스럽게 Adobe 측에서 빠르게 패치를 진행하여 금일 업데이트가 가능하다.

수동으로 업데이트를 받으려면 "제어판 -> Flash Player -> 고급탭" 에서 업데이트 버튼을 클릭하면 된다.
(해당 내용은 WindowsXP 버전이며, Windows7은 "제어판 -> 시스템 및 보안-> Flash Player -> 고급탭" 에서 확인하면 된다.

현재 최신 버전은 10.3.181.26 이 최신이며, 이번 취약점이 10.3.181.23 과 이하 버전에 영향이 있기에 위의 그림과 같이
버전이 낮은분들은 후딱!! 업데이트 하시기 바람!!

원본 : http://www.adobe.com/support/security/bulletins/apsb11-18.html

Security update available for Adobe Flash Player

Release date: June 14, 2011

Vulnerability identifier: APSB11-18

CVE number: CVE-2011-2110

Platform: All Platforms

SUMMARY

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability (CVE-2011-2110) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild in targeted attacks via malicious Web pages.

Adobe recommends users of Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris update to Adobe Flash Player 10.3.181.26, available now. Adobe expects to make available an update for Adobe Flash Player 10.3.185.23 and earlier versions for Android before the end of the week of June 13, 2011.

Note: This issue does not affect the Authplay.dll component that ships with Adobe Reader and Acrobat X (10.0.3) and earlier 10.x and 9.x versions for Windows and Macintosh operating systems.

AFFECTED SOFTWARE VERSIONS

Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems
Adobe Flash Player 10.3.185.23 and earlier versions for Android

To verify the version of Adobe Flash Player installed on your system, access the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe (or Macromedia) Flash Player" from the menu. If you use multiple browsers, perform the check for each browser you have installed on your system.

SOLUTION

Adobe recommends all users of Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris upgrade to the newest version 10.3.181.26 by downloading it from the Adobe Flash Player Download Center. Windows users and users of Adobe Flash Player 10.3.181.16 or later for Macintosh can install the update via the auto-update mechanism within the product when prompted.

Adobe expects to make available an update for Adobe Flash Player 10.3.185.23 and earlier versions for Android before the end of the week of June 13, 2011.

SEVERITY RATING

Adobe categorizes this as a critical update and recommends users update their installations to the newest versions.

DETAILS

Note: This issue does not affect the Authplay.dll component that ships with Adobe Reader and Acrobat X (10.0.3) and earlier 10.x and 9.x versions for Windows and Macintosh operating systems.

Affected software	Recommended player update	Availability
Flash Player 10.3.181.23 and earlier	10.3.181.26	Flash Player Download Center
Flash Player 10.3.181.23 and earlier - network distribution	10.3.181.26	Flash Player Licensing
Flash Player integrated with Google Chrome	10.3.181.26	Google Chrome Releases

'취약점소식' 카테고리의 다른 글

[Adobe] Adobe 프로그램 보안 업데이트(Illustrator, Photoshop, Flash Professional, Shockwave Player) (6)	2012.05.10
한글(HWP) 스택오버플로우 취약점 보안 업데이트 (2011-12-23) (0)	2011.12.25
[Adobe]Adobe Acrobat Reader Remote Code Execution Vulnerability in Flash Player(CVE-2011-0611) (1)	2011.04.12
[Adobe]Adobe Acrobat Reader Remote Code Execution Vulnerability in Flash Player(CVE-2011-0609) (0)	2011.03.15
[Google] Google Chrome v8.0.552.237 .replace DOS (0)	2011.01.31

처리의 블로그

[Adobe]Security update available for Adobe Flash Player(CVE-2011-2110)