Adobe has released a new version of Flash Player, its media player software. This version includes a fix for the clickjacking issue that has been making the rounds recently. Earlier this month, we reported on Adobe’s security advisory about this risk. Adobe’s security bulletin outlines the fix that was added to Flash Player: “This update includes further changes to enhance Flash Player’s interpretation of cross-domain policy files. These changes could help prevent privilege escalation attacks against web servers hosting Flash content and cross-domain policy files.”
We strongly recommend that all Flash users – which means just about everyone who uses the Internet – upgrade now.