Secunia

MacroMedia FlashPlayer is vulnerable to a buffer overrun. The problem is that certain headers aren't parsed and verified correctly.

The headers:
File Length
Fame Size
Frame Rate
Frame Count
Can be modified in a way, so that maliciously crafted.swf files causes a buffer overflow, this buffer overflow can be exploited to run arbitrary code with the privileges of the user.

This can be used to cause a buffer overflow which can be abused to run arbitrary code.

Internet Explorer, Netscape, AOL browsers, Neoplanet and Opera are also vulnerable, as they ship with MacroMedia FlashPlayer integrated by default.
None of the browser vendors has notified their customers about this vulnerability.

Solution
Upgrade to 6.0.65.0 or later, new versions are available from:
Further details available in Customer Area

Provided and/or discovered by
eEye

Changelog
Further details available in Customer Area

Original Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23569
http://www.eeye.com/html/Research/Advisories/AD20021216.html

Deep Links
Links available in Customer Area