0-day on Flash Player 10.0.x and older all OS's (upgrade to rc now)

[Victory]

A critical vulnerability exists in Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems. This vulnerability (CVE-2010-1297) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat. This advisory will be updated once a schedule has been determined for releasing a fix.

Adobe - Security Advisories: Security Advisory for Flash Player, Adobe Reader and Acrobat


Get the RC:

Adobe Labs - Adobe Flash Player 10.1

 

[mattseh]

time to install flashblock

 

[kblessinggr]

time to install flashblock

Or just disable the plugin completely.

 

[medicalhumor]

commence the Steve Jobs conspiracy theories

edit: Just noticed this was my 1000th post - Popeye, Hellblazer, Dispel, LotsofZeros, enjoy

 

[BluAffiliate]

Ouch. Not good for Adobe since they're under so much heat as it is. Steve Jobs is going to be sitting there saying 'told ya so'.