Fri, 13/11/09 – 7:55 | No Comment

Researchers show how Adobe Flash can be exploited in browsers when victim visits sites that accept user-generated content Researchers have discovered a new attack that exploits the way browsers operate with Adobe Flash — and there’s no simple patch for it. The attack can occur on Websites that accept user-generated content — anything from Webmail to social networking sites. An attacker basically takes advantage of the fact that a Flash object can be loaded as content onto a site and then can execute malware from that site to infect and steal information from visitors who view that content by clicking it.

Read the full story »
Articles

Patch management and related articles.

Bulletins

Microsoft’s monthly security bulletins.

Downloads

Security-related downloads from Microsoft download center.

Exploits

Various exploits seen in the wild.

KB Articles

Microsoft knowledge base articles.


Home » Articles, Exploits

New Flash Attack Has No Real ‘Fix’

Posted on Friday, 13 November 2009No Comment

Researchers show how Adobe Flash can be exploited in browsers when victim visits sites that accept user-generated content Researchers have discovered a new attack that exploits the way browsers operate with Adobe Flash — and there’s no simple patch for it. The attack can occur on Websites that accept user-generated content — anything from Webmail to social networking sites. An attacker basically takes advantage of the fact that a Flash object can be loaded as content onto a site and then can execute malware from that site to infect and steal information from visitors who view that content by clicking it.

Here is the original post:
New Flash Attack Has No Real ‘Fix’


Tags: , , , , , ,

Related posts

Leave a comment!

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

Be nice. Keep it clean. Stay on topic. No spam.

You can use these tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.

Comment spam protected by SpamBam
(11303 spam filtered)