[WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications'

Notification of New Windows Application Messages winappupdates-announcements at bigmail.bigfix.com
Tue Jun 8 05:10:33 PDT 2010


Fixlet Site - 'Updates for Windows Applications'
Current Version: 273	Published: Mon, 07 Jun 2010 21:13:30  GMT

New Fixlets:
============

***************************************************************
Title: APSA10-01: Security Advisory for Adobe Reader 9.x
Severity: Critical
Fixlet ID: 8091031
Fixlet Link: http://www.adobe.com/support/security/advisories/apsa10-01.html

Fixlet Description: A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability (CVE-2010-1297) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat. This advisory will be updated once a schedule has been determined for releasing a fix. Adobe recommends deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader and Acrobat 9.x, which mitigates the threat for those products. This Fixlet renames authplay.dll to authplayold.dll in the Adobe Reader directory. 

Important Note: After applying the patch, users will experience a non-exploitable crash or error message when opening a PDF file that contains SWF content.

***************************************************************
Title: APSA10-01: Security Advisory for Adobe Reader 9.x (French)
Severity: Critical
Fixlet ID: 8091032
Fixlet Link: http://www.adobe.com/support/security/advisories/apsa10-01.html

Fixlet Description: A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability (CVE-2010-1297) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat. This advisory will be updated once a schedule has been determined for releasing a fix. Adobe recommends deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader and Acrobat 9.x, which mitigates the threat for those products. This Fixlet renames authplay.dll to authplayold.dll in the Adobe Reader directory. 

Important Note: After applying the patch, users will experience a non-exploitable crash or error message when opening a PDF file that contains SWF content.

***************************************************************
Title: APSA10-01: Security Advisory for Adobe Acrobat 9.x
Severity: Critical
Fixlet ID: 9091021
Fixlet Link: http://www.adobe.com/support/security/advisories/apsa10-01.html

Fixlet Description: A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability (CVE-2010-1297) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat. This advisory will be updated once a schedule has been determined for releasing a fix. Adobe recommends deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader and Acrobat 9.x, which mitigates the threat for those products. This Fixlet renames authplay.dll to authplayold.dll in the Adobe Acrobat directory. 

Important Note: After applying the patch, users will experience a non-exploitable crash or error message when opening a PDF file that contains SWF content.

***************************************************************
Title: APSA10-01: Security Advisory for Adobe Acrobat 9.x (French)
Severity: Critical
Fixlet ID: 9091022
Fixlet Link: http://www.adobe.com/support/security/advisories/apsa10-01.html

Fixlet Description: A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability (CVE-2010-1297) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat. This advisory will be updated once a schedule has been determined for releasing a fix. Adobe recommends deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader and Acrobat 9.x, which mitigates the threat for those products. This Fixlet renames authplay.dll to authplayold.dll in the Adobe Acrobat directory. 

Important Note: After applying the patch, users will experience a non-exploitable crash or error message when opening a PDF file that contains SWF content.



More information about the WinAppUpdates-Announcements mailing list