[LINK] [Fwd: US-CERT Technical Cyber Security Alert TA06-075A -- Adobe Macromedia Flash Products Multiple Vulnerabilities]

[Rick Welykochy]

Rick Welykochy wrote:

> Howard Lowndes wrote:
> 
>> This one is dangerous.
>>
>> OK, ppl know to update their opsys, but how many bother to update 
>> their plugins.
> 
> 
>> Adobe Macromedia Flash Products Contain Vulnerabilities
> 
> 
> Lemme see, three computers (all *nix) with perhaps fifteen different
> browser instances installed amongst the lot of them. Difficult to
> turn Flash off in some. How to upgrade? Will just upgrading the
> version of Flash flow through to the browsers so they are no longer
> vulnerable? How would I know? So many questions. Ah it's all too
> hard. Think I'll move on.
> 
> Sound familiar?

Further investigation has revealed the following:

   o   most of my browsers do NOT allow plug-ins to be turned off
       with Safari being the exception

   o   although Macromedia fails to make the slightest mention of
       this security exploit on their home page, you can read about
       it here:

       http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html

   o   you can UNINSTALL the damn thing using this page:

       http://www.macromedia.com/shockwave/download/alternates/

       Pick the appropriate uninstaller, download, uninstall Flash.

The last step above is bliss: I no longer see those annoying inline Flash
ads -- they are replaced (sometimes) with an animated GIF, which is
easy to block.

Now, I thought I'd try to install Flash just in ONE BROWSER, and leave it
off all the others. No can do. The installer insists on finding all my
browsers and infecting them with Flash. sigh.

I'll live without it.


cheers
rickw


-- 
_________________________________
Rick Welykochy || Praxis Services

Research is what I'm doing when I don't know what I'm doing.
      -- Wernher von Braun