http://www.securityfocus.com/bid/29386

 

Bugtraq ID: 29386 Class: Unknown CVE: Remote: Yes Local: No Published: May
27 2008 12:00AM Updated: May 27 2008 09:33PM Credit: Symantec Vulnerable:
Adobe Flash Player 9.0.124 .0
Adobe Flash Player 9.0.115.0

 

Symantec has observed that this issue is being actively exploited in the
wild.

UPDATE: Continued investigation reveals that this issue is fairly
widespread. Malicious code is being injected into other third-party domains
(approximately 20,000 web pages), most likely through SQL-injection attacks.
The code then redirects users to sites hosting malicious Flash files
exploiting this issue.

 

目前没有patch

 

[Ph4nt0m] <http://www.ph4nt0m.org/>  

[Ph4nt0m Security Team]

                   <http://blog.ph4nt0m.org/> [EMAIL PROTECTED]

          Email:  [EMAIL PROTECTED]

          PingMe:
<http://cn.pingme.messenger.yahoo.com/webchat/ajax_webchat.php?yid=hanqin_wu
hq&sig=9ae1bbb1ae99009d8859e88e899ab2d1c2a17724> 

          === V3ry G00d, V3ry Str0ng ===

          === Ultim4te H4cking ===

          === XPLOITZ ! ===

          === #_# ===

#If you brave,there is nothing you cannot achieve.#

 

 


--~--~---------~--~----~------------~-------~--~----~
 要向邮件组发送邮件,请发到 [email protected]
 要退订此邮件,请发邮件至 [EMAIL PROTECTED]
-~----------~----~----~----~------~----~------~--~---

<<inline: image001.gif>>

回复