Macromedia Flash Player SWF File Handling Arbitrary Code Execution

Secunia Advisory: SA17430
Release Date: -- 2005-11-05

Critical: ------ Highly critical
Impact: -------- System access
Where: --------- From remote
Solution Status: Vendor Patch

Software:
Macromedia Flash Player 6.x
Macromedia Flash Player 7.x

Description:
eEye Digital Security has reported a vulnerability in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used as an index in Flash.ocx to reference an array of function pointers. This can be exploited via a specially crafted SWF file to cause the index to reference memory that are under the attackers control, which causes Flash Player to use attacker supplied values as function pointers.

Successful exploitation allows execution of arbitrary code.

The vulnerability has been reported in Flash Player version 7.0.19.0 and prior.

Solution:
Update to Flash Player 8 (8.0.22.0) or apply Flash Player 7 update (7.0.61.0 or 7.0.60.0).

Flash Player 8 download:
»www.macromedia.com/shockwave/dow···aveFlash

Flast Player 7 update:
»www.macromedia.com/go/d9c2fe33

said by Sith HMP :

How do I find out which version of the player I have.