• info
• discussion
• exploit
• solution
• references

Adobe Flash Player Plugin HTTP Header Injection Weakness

Solution:
Adobe has released version 9.0.28.0 of Flash along with an advisory to address this issue. Please see the referenced advisory for information on obtaining and applying fixes.


Sun Solaris 10.0

• Sun 125332-01
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-125332-01-1

Sun Solaris 10.0_x86

• Sun 125333-01
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-125333-01-1

Apple Mac OS X Server 10.4.8

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.8

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Adobe Flash Player Plugin 7.0.25

• SuSE flash-player-7.0.69.0-1.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/flash-player-7.0 .69.0-1.1.i586.rpm


• SuSE flash-player-7.0.69.0-1.1.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/flash-player-7.0. 69.0-1.1.i586.rpm

Adobe Flash Player Plugin 7.0.63

• SuSE flash-player-7.0.69.0-1.1.i586.rpm
  openSUSE 10.2:
  ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/flash-player-7.0.69.0 -1.1.i586.rpm


• SuSE flash-player-7.0.69.0-1.2.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/flash-player-7.0.69.0 -1.2.i586.rpm