Vulnerability in Adobe Flash

30th June 2008

PandaLabs Laboratory reported the discovery of a new vulnerability in Adobe Flash, which is used to spread malicious codes.
Cyber criminals are spreading .swf files, which have been established for the use of a new vulnerability in Adobe Flash, in two different ways. In some cases, when a user visits a web page containing one of these modified files, the browser perceives the code inside the file as a command to load a certain type of malware. In other cases, the code contained in a Flash-file, redirects the user (inapparntly for the latter) to a malicious web page set up to launch new attacks against the system and penetration of new malicious codes on the computer.
There are different codes for various browsers. PandaLabs has already detected the spread trojan Wow.UB using this method, although the list of malicious codes distributed this way, can increase in a few hours.
To resolve this problem, PandaLabs recommends users not to run suspicious .swf files and download updates issued by Adobe.