We have just posted a Security Advisory for Flash Player in response to recently published reports of a ‘Clickjacking’ issue in multiple web browsers that could allow an attacker to lure a web browser user into unknowingly clicking on a link or dialog. This potential ‘Clickjacking’ browser issue affects Adobe Flash Player’s microphone and camera access dialog. A Flash Player update to mitigate the issue will be available before the end of October. In the meantime, users can apply the workaround described in the Advisory.
Thank you again to Robert Hansen and Jeremiah Grossman for their help with this issue. Adobe will continue to work with Jeremiah, Robert, and browser vendors on a comprehensive Clickjacking solution.
This posting is provided “AS IS” with no warranties and confers no rights.
Leave a comment