Adobe releases Update for Flash Player - SSO-AD2009-006

26 February 2009

Software and platforms affected

The following software is affected

Adobe Flash Player prior to version 10.0.22.87

for the following operating system platforms:

Windows
Mac OS X
Linux

What is the problem?

There are bugs in the Adobe Flash Player software (for versions prior to version 10.0.22.87) which, if not fixed, could result in your computer being attacked by criminals. Your personal and/or business information may be accessed for fraudulent or illegal purposes (eg, identity theft).

This software is installed on your computer as a browser plug-in to display “flash” content found on many popular web sites. Flash content includes some animation and video formats, such as is needed to view videos on YouTube.com.

What we recommend you do

The problem can be easily fixed by updating to the latest version of Adobe Flash software from:

http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash

Please note that if you have more than one web browser installed on your computer you need to update the Adobe Flash Player for each browser.  This is done by connecting to the Adobe web site separately using each browser.  

Where you can find more information

Adobe Product Security Incident Response Team (PSIRT):

http://blogs.adobe.com/psirt/

Adobe - Security Advisories : APSB09-01: Flash Player update available to address security vulnerabilities:

http://www.adobe.com/support/security/bulletins/apsb09-01.html

To verify your existing Adobe Flash Player version number visit:

http://www.adobe.com/products/flash/about/

This will also tell you if Adobe Flash Player is installed for the particular browser you use.  If you have more than one browser installed, eg, Windows Internet Explorer and Safari or Mozilla Firefox, etc, repeat this process using each browser.  If the Adobe Flash Player plug-in is not installed in your Mozilla Firefox browser, it will say that "additional plugins are required to display all the media on this page".  You do not need to install the plug-in for Adobe Flash Player unless you wish to do so.

Disclaimer

This Advisory has been prepared by AusCERT for the Department of Broadband, Communications and the Digital Economy.

The information is intended for used by home users and small to medium sized businesses and is general information only and not intended as advice and was accurate and up to date at the time of publishing. The material and information in this Advisory is not adapted to any particular person's circumstances and therefore cannot be relied upon to be of assistance in any particular case. In any important matter, you should seek professional advice relevant to your own circumstances.

The Commonwealth, AusCERT, and all other persons associated with this Advisory accept no responsibility or liability for information either included or referred to in the Advisory. No responsibility or liability is accepted for any damage, loss or expense incurred as a result of the information contained in the Advisory, whether by way of negligence or otherwise.

The listing of a person or organisation in any part of this site or Advisory does not imply any form of endorsement by the Commonwealth of the products or services provided by that person or organisation. Similarly, links to other web sites have been inserted for your convenience and do not constitute endorsement of material at those sites, or any associated organisation, product or service.

Please note that material in this Advisory, as the case may be, includes views or recommendations of third parties, which do not necessarily reflect the views of the Commonwealth, or indicate its commitment to particular course of action. Material on this site or in this Advisory may also include information provided by third parties. The Commonwealth cannot verify the accuracy of information that has been provided by third parties.