# MA-270.022011: MyCERT Alert - Multiple Critical Vulnerabilities in Adobe Flash Player

**Date:** 09 Feb 2011  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-270.022011  
**Advisory ID:** MA-270.022011

---

**1.0 Introduction**
Multiple critical vulnerabilities have been identified in Adobe Flash Player 10.1.102.64 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems.
This vulnerability allows a remote attacker to execute arbitrary code on a vulnerable version of Adobe Flash Player. User interaction is required where a user must visit a malicious website which is embedded with a specially crafted SWF file. These vulnerabilities would cause the application to crash and could potentially allow attacker to take control of the affected system. [1]
**2.0 Impact**
By exploiting this vulnerability, an attacker could execute arbitrary code on vulnerable installations of Adobe Flash and gain the same privilege as the user. These vulnerabilities could be exploited to install malware on the user's computer.
**3.0 Affected Products**
- Adobe Flash Player 10.1.102.64 and earlier versions for Windows, Macintosh, Linux, and Solaris
**4.0 Recommendation**
All users of Adobe Flash Player 10.1.102.64 and earlier versions are recommended to upgrade to the newest version 10.2.152.26 by downloading it from the Adobe Flash Player Download Center at the following URL:
- <http://get.adobe.com/flashplayer/>
Windows users can install the update via the auto-update mechanism within the product when prompted.
MyCERT generally advise users of this product to keep themselves updated with the latest security announcements by the vendor. In case the public receives any suspicious URL or .SWF file, and requires our further analysis, please reach us through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#aec3d7cdcbdcdaeec3d7cdcbdcda80c1dcc980c3d7)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
1. <https://www.adobe.com/support/security/bulletins/apsb11-02.html>
2. <http://www.zerodayinitiative.com/advisories/ZDI-11-081/>