Adobe patch thwarts clickjacking attack

sjb007 · 10-17-2008, 02:53 AM

Adobe has published an update to its popular Flash Player software, addressing a much-publicised clickjacking flaw.

Clickjacking affects multiple applications (including browsers and media players) and creates a means for hackers to trick prospective marks into unknowingly clicking on a link or dialogue. Adobe Flash Player - specifically the microphone and camera access dialogue - was among the products affected.

Version 10.0.12.36 of Flash Player defends against the attack while also addressing a glitch involving interoperability with Firefox. It deals too with a bug in enforcing cross-domain policies that might be exploited by hackers to bypass security restrictions, as explained in an advisory form Adobe here.

The new version of Flash player also introduces a whole raft of new features, focusing on the ability to handle audio files, as explained in our earlier story here.

Adobe published a workaround to defend against the clicking flaw last week, promising a patch by the end of the month, so it's actually ahead of schedule in delivering a security fix

Full article here - http://www.theregister.co.uk/2008/10..._clickjacking/

10-17-2008, 02:53 AM	#1 (permalink)
sjb007 Analyst, Security Team Join Date: Dec 2007 Location: Lincoln UK Posts: 2,259 OS: Windows 7 Premium x64 My System	Adobe patch thwarts clickjacking attack Adobe has published an update to its popular Flash Player software, addressing a much-publicised clickjacking flaw. Clickjacking affects multiple applications (including browsers and media players) and creates a means for hackers to trick prospective marks into unknowingly clicking on a link or dialogue. Adobe Flash Player - specifically the microphone and camera access dialogue - was among the products affected. Version 10.0.12.36 of Flash Player defends against the attack while also addressing a glitch involving interoperability with Firefox. It deals too with a bug in enforcing cross-domain policies that might be exploited by hackers to bypass security restrictions, as explained in an advisory form Adobe here. The new version of Flash player also introduces a whole raft of new features, focusing on the ability to handle audio files, as explained in our earlier story here. Adobe published a workaround to defend against the clicking flaw last week, promising a patch by the end of the month, so it's actually ahead of schedule in delivering a security fix Full article here - http://www.theregister.co.uk/2008/10..._clickjacking/ __________________ If we have helped you then please consider donating Proud Member of ASAP & UNITE Since 2007