– changes the way Flash Player interprets HTTP response headers to prevent a potential cross-site scripting attack
– introduces a change to mitigate a potential issue that could aid an attacker in executing a DNS rebinding attack
– introduces stricter interpretation of an ActionScipt attribute to prevent a potential HTML injection issue
– prevents an issue with policy file interpretation that could potentially lead to bypass of a non-root domain policy
– prevents an issue with the Flash Player interpretation of jar:
protocol on Mozilla browsers that could potentially lead to information
disclosure
– prevents a potential Windows-only information disclosure issue in the Flash Player ActiveX control
Adobe consiglia di effettuare immediatamente l’aggiornamento del Plug-in attraverso il Download Center di Adobe o collegandosi direttamente al sito web.