Flash Player contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered when the victim loads a malicious SWF file. It is possible that the flaw may allow an attacker to take control of the affected system resulting in a loss of confidentiality, integrity, and/or availability.

Upgrade to version 8.0.24.0 or 7.0.63.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1015770
• Bugtraq ID: 17106
• Secunia Advisory ID: 19198 19218 19259 19328 20045 28136
• CVE ID: 2006-0024 (see also: NVD)
• SCIP VulDB ID: 2085 3517
• Microsoft Knowledge Base Article: 913433
• VUPEN Advisory: ADV-2006-0952
• Keyword: APSB06-03
• Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=307179
  http://docs.info.apple.com/article.html?artnum=307224
  http://www.gentoo.org/security/en/glsa/glsa-200603-20.xml
  http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html
• Other Advisory URL: http://lists.suse.de/archive/suse-security-announce/2006-Mar/0004.html
  http://www.microsoft.com/technet/security/advisory/916208.mspx
• Vendor Specific Solution URL: http://www.apple.com/support/downloads/securityupdate20070091110411ppc.html
  http://www.apple.com/support/downloads/securityupdate20070091110411universal.html
  http://www.apple.com/support/downloads/securityupdate2007009111051.html
• News Article: http://www.eweek.com/article2/0,1895,1938443,00.asp
• Microsoft Security Bulletin: MS06-020
• RedHat RHSA: RHSA-2006:0268

• Microsoft