Vulnerability Team

Tras las nuevas vulnerabilidades que afectan a diversos productos de la familia Adobe, estos han decidido a publicar varios Security Advisories para solucionar dichos problemas. Todos los boletines son del día martes 14 de junio.

APSB11-18 Security update available for Adobe Flash Player
APSB11-17 Security update available for Adobe Shockwave Player
APSB11-16 Security updates available for Adobe Reader and Acrobat
APSB11-15 Security update available for LiveCycle Data Services, LiveCycle ES, and BlazeDS
APSB11-14 Security update: Hotfix available for ColdFusion

fuente: adobe.com 

Adobe has released security advisory APSA11-02 to alert users of a vulnerability affecting the following Adobe products:

• Flash Player 10.2.153.1 and earlier versions for Windows, Macintosh, Linux, and Solaris
• Flash Player 10.2.154.25 and earlier versions for Chrome
• Flash Player 10.2.156.12 and earlier versions for Android * the Authplay.dll component that ships with Adobe Reader and
• Acrobat X (10.0.2) and earlier 10.x and 9.x versions for Windows and Macintosh.

Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

The Adobe advisory indicates that this vulnerability is currently being exploited in targeted attacks via a Flash (.swf) file embedded in a Microsoft Word (.doc) file delivered as an email attachment.
However, the method of attack can change at any time.

At this time, Adobe has not released a fix to mitigate this vulnerability. Vulnerbility Team encourages users and administrators to do the following to help mitigate the risks until a fix becomes available:
* Review Adobe security advisory APSA11-02.
* Exercise caution when opening unsolicited email attachments.
* Refer to the Using Caution with Email Attachments Cyber Security

REFERENCE: http://www.adobe.com/support/security/advisories/apsa11-02.html

fuente: adobe.com | us-cert.org