Overclock.net › Forums › Industry News › Software News › [WS] Security Alert: Mass exploitation with Adobe Flash
New Posts  All Forums:Forum Nav:

[WS] Security Alert: Mass exploitation with Adobe Flash

post #1 of 5
Thread Starter 
Quote:
Websense® Security LabsT ThreatSeekerT technology has detected thousands of web sites infected with the recent mass JavaScript injection that exploits a vulnerability in Adobe Flash (CVE-2007-0071) to deliver its malicious payload. This attack has been previously mentioned in ISC and Adobe's blog.

This vulnerability is not a 0-day and users with the latest version of Flash Player (version 9.0.124.0) are safe. However, there are still many on older versions of Flash that are unaware of this mass web infection and are susceptible to this drive-by attack. An update to the latest version of Flash Player is highly recommended.

Websense ThreatSeeker has been tracking these malicious web sites and have discovered numerous reputable web sites that are now unwilling participants, infecting their very own visitors. These sites are from various industries such as government, education, healthcare, finance, media, and entertainment. This attack also attempts to exploit other popular vulnerabilities such as MDAC, RealPlayer, and various ActiveX controls.

Websense customers are protected from this drive-by threat.

Visit this alert on our web site for screenshots from Microsoft, Dept. of Education (Australia), PBS, Durex, CDC (Centers for Disease Control and Prevention), Discovery Channel, various universities and a Pakistani district government.

To view the details of this alert Click here
A Email from Websense.
post #2 of 5
i hate websense at my school. but thanks for the warning.
    
CPUMotherboardGraphicsRAM
q6600 8*400 p35c ds3r x1950 pro 512mb corsair xms2 at 800mhz 
Hard DriveOSMonitorPower
250gb hitachi vista home prem 32bit lg l226 wtq-pf corsair vx550watt 
Case
cm 690 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
q6600 8*400 p35c ds3r x1950 pro 512mb corsair xms2 at 800mhz 
Hard DriveOSMonitorPower
250gb hitachi vista home prem 32bit lg l226 wtq-pf corsair vx550watt 
Case
cm 690 
  hide details  
Reply
post #3 of 5
Thread Starter 
Well I hated at first but it does stop the not smart people from downloading malicious things.
post #4 of 5
Adobe Flash is the biggest piece of junk in town.

How do I update flash? I know I have it, but I cannot find anything to launch and check for updates.
Edited by pauldovi - 5/30/08 at 9:41pm
System
(13 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 2500k ASRock P67 Extreme4 Gen 3 AMD 7970 16GB DDR3 
Hard DriveOptical DriveOSMonitor
Intel 520 256GB SATA DVD Burner Windows 7 64 bit Deal U2410 
KeyboardPowerMouse
Adesso Mechanical Silverstone OP650 Logitech G700 
  hide details  
Reply
System
(13 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 2500k ASRock P67 Extreme4 Gen 3 AMD 7970 16GB DDR3 
Hard DriveOptical DriveOSMonitor
Intel 520 256GB SATA DVD Burner Windows 7 64 bit Deal U2410 
KeyboardPowerMouse
Adesso Mechanical Silverstone OP650 Logitech G700 
  hide details  
Reply
post #5 of 5
Just install the new one..
Omicron Lyrae
(13 items)
 
  
CPUMotherboardGraphicsRAM
Phenom II X3 720 BE @3.6 Asus M4A785TD-V EVO Sapphire HD5770 V2 OCZ 2x2GB Gold DDR3-1333 
Hard DriveOptical DriveOSMonitor
Samsung Spinpoint F3 1TB Sony Lightscribe DVD-RW Windows 7 Professional 64-bit AOC F22+ 1080p 
KeyboardPowerCaseMouse
Cherry Scissor Switch Flat Keyboard OCZ StealthXstream 600W Cooler Master Elite 334 Microsoft Sidewinder 
  hide details  
Reply
Omicron Lyrae
(13 items)
 
  
CPUMotherboardGraphicsRAM
Phenom II X3 720 BE @3.6 Asus M4A785TD-V EVO Sapphire HD5770 V2 OCZ 2x2GB Gold DDR3-1333 
Hard DriveOptical DriveOSMonitor
Samsung Spinpoint F3 1TB Sony Lightscribe DVD-RW Windows 7 Professional 64-bit AOC F22+ 1080p 
KeyboardPowerCaseMouse
Cherry Scissor Switch Flat Keyboard OCZ StealthXstream 600W Cooler Master Elite 334 Microsoft Sidewinder 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Software News
Overclock.net › Forums › Industry News › Software News › [WS] Security Alert: Mass exploitation with Adobe Flash