152
edits
Changes
SECURITY - Adobe Flash Player security settings for "Clickjacking" vulnerability (APSA08-08)
== Adobe Flash Player 9.0.124.0 for Firefox ==
You are encouraged to upgrade for security reasons: http://www.adobe.com/support/security/bulletins/apsb08-11.htmland then to apply the security settings for "Clickjacking" vulnerability (APSA08-08) defined below.
Installer packaged as an executable, installs as a plugin. Sometimes it is upgraded only on the second run of wpkg, it must be a timing issue between installing over previous version and checking conditions.
== Adobe Flash Player 9.0.124.0 for Internet Explorer ==
You are encouraged to upgrade for security reasons: http://www.adobe.com/support/security/bulletins/apsb08-11.htmland then to apply the security settings for "Clickjacking" vulnerability (APSA08-08) defined below.
Installer packaged as .msi, installs as an ActiveX. You can download it from http://fpdownload.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_active_x.msi - make sure you comply with the license: http://www.adobe.com/licensing/distribution/.
</package>
</source>
== Adobe Flash Player security settings for "Clickjacking" vulnerability (APSA08-08) ==
Waiting for the next version of Flash Player to be available, you are strongly encouraged to apply the following settings for security reasons: http://www.adobe.com/support/security/advisories/apsa08-08.html.
According to bulletin and to the "Adobe Flash Player Administration Guide" (you find the link in the same security bulletin):
* create a file named "mms.cfg"
* write in this file the lines containing the "ParameterName = ParameterValue" pairs you need, "AVHardwareDisable = 1" in this APSA08-08 case
* deploy it with the following WPKG package
<source lang="xml">
<package id="flash-settings" name="Adobe Flash Player settings for APSA08-08 vulnerability" revision="1" reboot="false" priority="0" execute="once">
<install cmd='%COMSPEC% /c copy /Y "%SOFTWARE%\Flash\settings\mms.cfg " "%WINDIR%\system32\Macromed\Flash\" ' />
</package>
</source>
Or you could just integrate this line with the installation packages above, if you do not want to keep it as a separate package.
== Adobe Flash Player 9.0.115.0 for Firefox ==