Prediction: More Hacked Players

[diemos]

http://secwatch.org/advisories/1021314/

Release Date: 28/05/2008 Severity: Extremely Critical Extremely Critical
SecWatch Advisory: SWID1021314 Cause: Not specified
Solution Status: Unpatched Impact: Denial of service
Execution of arbitrary code
Exploit Status: None Available Access Vector: From remote

Affected Software: Adobe Flash Player 9.x




Description:

A vulnerability in Adobe Flash Player has been reported, which can be exploited by remote users to compromise a user's system.

An unspecified memory corruption error exists when processing a malformed SWF file, which can be exploited to crash an affected browser or execute arbitrary code by e.g. tricking a user to visit a specially crafted web page.

Specific details are not currently available.

Note: This vulnerability is reportedly being exploited in the wild.



Affected:

Adobe Flash Player version 9.0.115.0 and 9.0.124.0. Other versions may also be affected.



Solution:

There was no vendor-supplied solution at the time of entry.



Credits:

Symantec

Updating your flash won't help you against this until there is an update available. Being that most people aren't too diligent about updates, I forsee more compromised accounts. Key word here is "Execution of arbitrary code".

Edit: This is a bit old (three months), wow Adobe, fail more.

http://www.macromedia.com/software/flash/about/

^ Links you to the current versions of flash available.

[Septimus]

Only thing you can do is to make sure that your NoScript and FlashBlock are on and hope that Adobe fixes this.

[Rocl]

Prediction: Not Enough Hacked

[cdgreg]

great...SE needs to implement more new security measures, preferably before the september update.

[Therin]

Solution: Hermitize (new word) yourself from the web - search websites on a separate, non-FFXI compatible system!

[Tajin]

Uh no, all SE needs to do is:

<Dude> I got haxxed halp!
<SE> Ok, please confirm so and so information of your acct. to see you are who you are.
<SE> Everything is correct sir, give me a few minutes to access the database and fix your PW.
<SE> All set sir, please login and change your password, etc, etc
<Dude> Ty lol. Call you back in 3 months when my retarded ass gets compromised again.

There you go, happy customers. The process becomes a little more complicated when people QQ about their lost Kclub of course.

[Ace-o-fire]

Prediction: Not Enough Hacked

I agree cold heatedly (as long as it isnt me.)

[Mega]

Solution: Hermitize (new word) yourself from the web - search websites on a separate, non-FFXI compatible system!

Thread winner. I've always swore to myself if I ever gain the means of affording a PC well equipped enough to run FFXI like I'd like it, I would use that PC solely to play FFXI and do all web browsing on a seperate PC.

It's the least I could do in an attempt to protect myself from losing everything I've worked so hard for over the years.

[Demosthenes11]

Solution: Hermitize (new word) yourself from the web - search websites on a separate, non-FFXI compatible system!

because we all have the money/space to own whatever we want at our own convenience!

[Grieverao]

Don't play FFXI on the same PC you browse anything with.
Don't have any passwords the same as your POL.

[Izzy]

This is the same thing that we have fixed before I think. Look at the release date.

[spooky]

Thread winner. I've always swore to myself if I ever gain the means of affording a PC well equipped enough to run FFXI like I'd like it, I would use that PC solely to play FFXI and do all web browsing on a seperate PC.

It's the least I could do in an attempt to protect myself from losing everything I've worked so hard for over the years.

Because viruses can't go over your local network right?

[Fhqwghads]

For IE users:

Tools -> Internet Options -> Programs tab -> Manage add-ons button -> Shockwave Flash Object

Click the "Disable" radio button in the Settings frame.
Click OK.
Close and re-open IE.

Flash can't screw you up now. If you like your MMO account, I recommend doing this on the PC you play them on. Don't browse the web from it. Don't have it in the same Workgroup/Domain as your other networked computers. Don't enable file/printer sharing on that PC. These steps will help to prevent some of the more common exploits, but you're still not safe. The only sure-fire way to remain safe from any PC exploits:

http://news.cnet.com/i/ne/p/2005/Xbo...ll_500x526.jpg
OR

http://www.needhamma.gov/images/page...lugged_200.bmp

[setzor]

download vmware, install windows to a virtual pc, don't install the shit that lets your windows installation to share any kindof information (ie clipboard) with your virtual computer, and browse from the virtualpc only, if it gets virused/keylogged/etc at least the OS you play ffxi on won't be affected. only downside is you need a decent computer. if SE ever gives me my character back, this will be the only way i browse...

[Kang]

Solution: Hermitize (new word) yourself from the web - search websites on a separate, non-FFXI compatible system!

I've been doing this for two years now. I play on my PC and surf the net on my Mac.

[Furoris]

For IE users:
The only sure-fire way to remain safe from any PC exploits:

[IMG]360

Until your 360 RROD's, like mine did yesterday ; ;

[Cutriss]

Until your 360 RROD's, like mine did yesterday ; ;

It's still safe from PC exploits.

[sleekmotorwurkz]

Prediction! SE will have a big version update in june to add a new notorious monster system which will be referred to as "ZNM" - see i can predict stuff that happened 2 months ago too!

For IE users:
http://www.mozilla.com/en-US/firefox/

there ya go

[Crisco]

AFK buying a new PC...cmon seriously? How bout SE fixes this on their end so accounts aren't so easily compromised. Why should we have to resort to random paranoia and multiple PCs to be able to safely enjoy FFXI? At least they took a step in the right direction with the pop-up keyboard to enter/change your passwords - that is until they figure out how to crack that.

[The Blackrose]

AFK buying a new PC...cmon seriously? How bout SE fixes this on their end so accounts aren't so easily compromised. Why should we have to resort to random paranoia and multiple PCs to be able to safely enjoy FFXI? At least they took a step in the right direction with the pop-up keyboard to enter/change your passwords - that is until they figure out how to crack that.

Because the onus is not squarely on Square-Enix. It is not their job to hold your hand. Just because SE has all of the security in the world into their systems does not mean that when you go to download Backdoor Sluts 6, you shouldn't scan for the slightest chance that there is a trojan sitting on there.

The consumer is just as much responsible for making sure their end is secure as SE is. How many times have people repeated "Use NoScript, update Flash, etc?" Being stupid is no longer a viable excuse. The information is out there, hop to it.