Secunia

A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an array-indexing error as the frame type identifier read from a SWF file is used as an index to reference an array of function pointers. This can be exploited via a specially crafted SWF file to use attacker-controlled memory as function pointers.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in Flash Player version 7.0.19.0 and prior on the Windows platform and in versions prior to 7.0.25.0 on the Unix platform.

Solution
Update to Flash Player 8 (8.0.22.0) or apply Flash Player 7 update (7.0.61.0 or 7.0.60.0).
Further details available in Customer Area

Provided and/or discovered by
Independently discovered by:
* Fang Xing, eEye Digital Security.
* Bernhard Mueller, SEC Consult.

Changelog
Further details available in Customer Area

Original Advisory
Macromedia:
http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html

eEye Digital Security:
http://www.eeye.com/html/research/advisories/AD20051104.html

SEC-Consult:
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038454.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area