Adobe.Flash.Button.Class.Handling.Memory.Corruption

Description

This indicates an attack attempt against a Memory Corruption vulnerability in Adobe products.
This issue is caused by an error in the "authplay.dll" when it handles a malicious Flash or PDF file. It may allow remote attackers to execute arbitrary code by sending a crafted Flash or PDF file.

Affected Products

Adobe Flash Player version 10.1.85.3 and prior.
Adobe Flash Player version 10.1.95.2 and prior.
Adobe Reader versions 9.0 through 9.4
Adobe Acrobat versions 9.0 through 9.4

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the patch, available from the vendor's website:
http://www.adobe.com/support/security/bulletins/apsb10-26.html
http://www.adobe.com/support/security/bulletins/apsb10-28.html

References

http://www.adobe.com/support/security/bulletins/apsb10-28.html http://www.adobe.com/support/security/bulletins/apsb10-26.html http://www.adobe.com/support/security/advisories/apsa10-05.html