[Owasp-singapore] Adobe confirms Flash contains Microsoft dev code bug, Promises fix for Flash on Thursday; only IE users at risk

Wong Onn Chee ocwong at usa.net
Tue Aug 4 03:28:27 EDT 2009


Until a patch for Flash is available, Adobe urged customers to
"consider" installing Microsoft's MS09-034 update, which that company
delivered Tuesday via Windows Update. Included in that IE update are new
defensive measures that are supposed to detect and block ActiveX
controls, like Flash Player and Shockwave Player, that were created
using the buggy ATL

Onn Chee: If you apply the latest MS patch, you are not likely to use
Adobe Flash in IE until after this Thu.

More information about the Owasp-singapore mailing list