Summary:  On September 12 2006 Adobe Systems Inc released a security bulletin detailing multiple critical vulnerabilities in versions 8.0.24.0 (and earlier) of its popular Flash media player.  According to the vendor, the primary vector of exploit for these vulnerabilities is user interaction (in the form of viewing specifically-crafted media files).  Adobe systems "categorizes this as a critical update and recommends affected users upgrade to version 9.0.16.0" for Windows and Mac users and also Indicates that Linux and Solaris users install updated versions of flash player 7.

Recommended Actions:   System Administrators and Flash users are encouraged to read the security bulletin and associated information (links provided below) and (if appropriate) install the updated version of Flash player at their earliest convenience.

ITS Actions: No additional specific actions are being taken to address this software update at the present time.  An update will be issued if any new actions are taken.

Resources:

Adobe Security Bulletin:
http://www.adobe.com/support/security/bulletins/apsb06-11.html

SANS diary page on Flash vulnerability and upgrades:
http://isc.sans.org/diary.php?storyid=1695

FrSirt advisory on Flash vulnerability:
http://www.frsirt.com/english/advisories/2006/3573