Last night our researchers identified similarities between the recent Adobe Flash exploits and a known (patched) vulnerability: CVE-2007-0071. At first, this appeared to close the case, but there was a report of a patched version of Flash falling victim to one of these attacks, and we’ve seen an SWF file referencing a missing file named WIN 9,0,124,0i.swf, which also suggests that the latest version of Flash is the target of that file.
The exploits that we have captured from the field do not appear to exploit the latest version of Flash. We continue to hunt for missing 9,0,124 exploits and will post an update should one be discovered. In the meantime, it’s best to update to the latest player, if you haven’t yet done so.
If you try a faked flash version say 9,0,125 will a request for:
WIN 9,0,125,0i.swf be made? Maybe it is just the coding of the site?
I found lots of malware about the variant.
Please analysis them as soon as possible.Thanks a lot.
Submit your own comments / message for this post