Some vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to gain knowledge of sensitive information or compromise a user's system.

1) A boundary error when processing FLV files can be exploited to cause a buffer overflow via an FLV file with a specially crafted DataObject section.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

The vulnerability affects versions 9.0.45.0 and prior.

2) An error within the interaction of Flash Player and certain browsers can be exploited to leak key presses to a Flash Player applet.

The vulnerability affects versions 7.0.69.0 and prior on Linux and Solaris. It does not affect Flash Player 9.

A bug has also been reported in the validation of the HTTP Referer in versions 8.0.34.0 and prior, which may aid in e.g. CSRF (Cross-Site Request Forgery) attacks.

Solution
Apply updates.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Stefano Di Paola and Giorgio Fedon, Minded Security.
2) The vendor credits Mark Hills.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Adobe:
http://www.adobe.com/support/security/bulletins/apsb07-12.html

Minded Security:
http://www.mindedsecurity.com/en/labs/advisories/MSA01110707

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers