Authoring - PDFzone
PDFZone Ziff-Davis Enterprise
Authoring | Utilities | Content Management | Document Management | Mobile | DRM | Other Formats | Tips
Home arrow Authoring arrow Adobe Warns About Flash Clickjacking, Offers Workaround
Adobe Warns About Flash Clickjacking, Offers Workaround
By Brian Prince

Rate This Article:
Add This Article To:
Adobe releases an advisory with workarounds for Adobe Flash Player to protect users from clickjacking attacks as the company prepares a patch. Security researchers Jeremiah Grossman and Robert Hansen recently raised red flags over clickjacking issues affecting all the major browsers, including Microsoft Internet Explorer and Apple Safari.

Adobe has posted an advisory to address concerns about clickjacking as it prepares a patch.

The advisory addresses a clickjacking browser issue that affects Adobe Flash Player's microphone and camera access dialog. If successfully executed, clickjacking allows an attacker to lure a Web user into unwittingly clicking on a link or dialog.

While clickjacking itself is not new, security pros Jeremiah Grossman, CTO of WhiteHat Security, and SecTheory CEO Robert Hansen sounded the alarm recently about clickjacking vulnerabilities that affect Adobe Flash Player and every major browser—Microsoft Internet Explorer, Opera, Mozilla Firefox and Apple Safari.

ADVERTISEMENT

The two were initially supposed to make a presentation about their findings at the OWASP (Open Web Application Security Project) NYC AppSec conference in New York in September, but cancelled it to give vendors an opportunity to patch.

Read the rest of this article on eWEEK.com.

 




Discuss Adobe Warns About Flash Clickjacking, Offers Workaround
 
>>> Be the FIRST to comment on this article!
 

 
 
>>> More Authoring Articles          >>> More By Brian Prince
 



FREE ZIFF DAVIS ENTERPRISE ESEMINARS AT ESEMINARSLIVE.COM
  • Dec 5, 2 p.m. ET
    Case Studies in MSP Profitability: 10 Processes to Automate to Achieve 2008 Goals
    with Michael Krieger. Sponsored by Autotask
  • Dec 6, 12:30 p.m. ET
    The State of the Great Windows Vista Migration
    with Aaron Goldberg. Sponsored by Dell & Microsoft
  • Dec 6, 2 p.m. ET
    Three Best Practices for Securing Microsoft Exchange
    with Michael Krieger. Sponsored by Entrust
  • Dec 6, 3 p.m. ET
    Simplify Your World, part 2: A Virtual Desktops Case Study
    with Joel Shore. Sponsored by EqualLogic
  • 12-19 VTS LOGO for BotMod
    Join us on Dec. 19 for Discovering Value in Stored Data & Reducing Business Risk. Join this interactive day-long event to learn how your enterprise can cost-effectively manage stored data while keeping it secure, compliant and accessible. Disorganized storage can prevent your enterprise from extracting the maximum value from information assets. Learn how to organize enterprise data so vital information assets can help your business thrive. Explore policies, strategies and tactics from creation through deletion. Attend live or on-demand with complimentary registration!
    FEATURED CONTENT

    Sponsored by Ziff Davis Enterprise Group


    DOWNLOADABLE ROI CALCULATORS & TOOLS FROM BASELINE
      Calculate Cost and ROI of Spam, VOIP, RFID, Sarbanes-Oxley and more...


    Featured Calculators:

     



    See More Tools!
    By Category| Planners |Calculators | Quizzes

     

    Special Report


    PDFzone Special Report: Making the Perfect PDF
    The Perfect PDF
    PDFzone shows you how to shine and polish your PDF by adding the reader-friendly touches your audience desires.

    Special Report


    PDFzone Special Report: Microsoft's PDF Play
    Microsoft's PDF Play
    Microsoft planned to offer a "Save to PDF" function in Office 2007, but the threat of legal action from Adobe may have them reconsidering.

    Special Report


    PDF conversion
    PDF Conversion Central
    Convert anything and everything to PDf and back again. Word docs, RSS, AutoCAD and more.
    ADVERTISEMENT