Adobe Releases Shockwave Player Update and Flash Player Update

DarkFiber Consulting — Fri, 31 Jul 2009 04:06:09 +0000

Adobe has released Shockware Player 11.5.1.601 because previous versions used a vulnerable version of the Microsoft Active Template Library (ATL). Additionally, Adobe has released Flash Player 10.0.22.87 and 9.0.246.0 to address the ATL issue and additional vulnerabilities in Flash Player. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code.

DarkFiber Consulting encourages users and administrators to review Adobe security bulletins APSB09-11 and APSB09-10 and apply any necessary updates to help mitigate the risks. Additional information can be found in the Adobe PSIRT blog and in Adobe security advisory APSA09-04.

Tags: Active Template Library, Adobe Update, Arbitrary Code, Atl, Attacker, Blog, Flash Player 10, Microsoft, Microsoft Active Template Library, Necessary Updates, Previous Versions, Psirt, Security Advisory, Security Bulletins, Shockwave Flash, Shockwave Player, Vulnerabilities, Vulnerable Version

Microsoft Releases Two Out-of-Band Security Bulletins and a Security Advisory

DarkFiber Consulting — Fri, 31 Jul 2009 04:06:08 +0000

Microsoft has released two out-of-band security bulletins. The first bulletin, MS09-034, is a cumulative security update for Internet Explorer that addresses several vulnerabilities. These vulnerabilities may allow a remote attacker to execute arbitrary code. The second bulletin, MS09-035, addresses vulnerabilities in the Visual Studio Active Template Library (ATL). Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code.

Additionally, Microsoft has released security advisory 973882 to provide specific guidance for developers, IT professionals, consumers, and home users regarding the vulnerabilities in Active Template Library (ATL).

DarkFiber Consulting encourages users and administrators to review Microsoft Security Bulletins MS09-034 and MS09-035 and Microsoft Security Advisory 973882 and apply any necessary updates or workarounds to help mitigate the risks. Additional information can be found in Technical Cyber Security Alert TA09-209A.

Tags: Active Template Library, Arbitrary Code, Atl, Attacker, Consumers, Cumulative Security Update, Cyber Security, Developers, Guidance, Home Users, Internet Explorer, Microsoft, Microsoft Security Advisory, Microsoft Security Bulletins, Necessary Updates, Visual Studio, Workarounds

DarkFiber Consulting - IT Managed Services » Atl

Adobe Releases Shockwave Player Update and Flash Player Update

Microsoft Releases Two Out-of-Band Security Bulletins and a Security Advisory