Latest News and Developments
This article is a follow-up to a previous article about an update to Internet Explorer that can break your Flash files.
Adobe/Macromedia has just released (April 14th, 2006) an extension for Flash Basic 8 and Flash Pro 8 that will allow you to publish Flash-based websites that do not need to be ‘clicked on’ to be activated.
An extension for Flash MX and Flash MX 2004 (and other versions) has not yet been released. Hopefully this is soon to come, but who knows… best thing to do is email Adobe about this.
Macromedia has announced that their are security vulnerabilities in browsers plug-in Flash Player 8.0.22.0 and earlier versions of Flash Player 8.
An Adobe/Macromedia Flash player security vulnerability that could potentially allow an attacker to execute remote code on a user’s system has been identified. Essentially you could get infected by simply viewing a malicous Flash file within your browser.
A Cyber Security Alert has been issues by US-Cert (the US computer emergency readiness team). Microsoft has also issued a security advisery.
The following are affected by this vurlnerability: Flash Professional 8, Flash Basic, Flash MX 2004, Flex 1.5, Breeze Meeting Add-In 5.1 and earlier, and Adobe Macromedia Shockwave Player 10.1.0.11 and earlier.
Adobe has released an upgraded version of Flash Player that can be downloaded here.
Other articles discussing this are as follows:
:: Adobe Security Bulletin
:: Flash Users Advised to Upgrade
:: Secunia Vurnerability Report
:: New Flash Player Closes Security Vulnerability
:: Macromedia Flash Player Remote Command Execution Vulnerability
My Flash Resource - A continually growing collection of tutorials, thoughts and interests of a Flash Animator and/or Developer.