Adobe Flash Player ½Å±Ô Ãë¾àÁ¡ 6Á¾¿¡ ´ëÇÑ ¾÷µ¥ÀÌÆ® ¹ßÇ¥
[º¸¾È´º½º ¹Î¼¼¾Æ] Adobe»ç´Â Adobe Flash Player¿¡¼ ¹ß»ýÇÏ´Â ½Å±Ô Ãë¾àÁ¡À» ÇØ°áÇÑ º¸¾È ¾÷µ¥ÀÌÆ®¸¦ ¹ßÇ¥Çß´Ù. ³·Àº ¹öÀü »ç¿ëÀÚ´Â ¾Ç¼ºÄÚµå °¨¿°¿¡ Ãë¾àÇÒ ¼ö ÀÖÀ¸¹Ç·Î ÇØ°á¹æ¾È¿¡ µû¶ó ÃֽŹöÀüÀ¸·Î ¾÷µ¥ÀÌÆ®ÇÒ °ÍÀ» ±Ç°íÇÏ°í ÀÖ´Ù.
¾÷µ¥ÀÌÆ®µÈ Ãë¾àÁ¡Àº ´ÙÀ½°ú °°´Ù.
¡â¸Þ¸ð¸® ¼Õ»ó Ãë¾àÁ¡(CVE-2015-0332 ~ 0333, CVE-2015-0335, CVE-2015-0339)
¡âtype confusion Ãë¾àÁ¡(CVE-2015-0334, CVE-2015-0336)
¡âÅ©·Î½º µµ¸ÞÀÎ Á¤Ã¥ ¿ìȸ Ãë¾àÁ¡(CVE-2015-0337)
¡âÆÄÀÏ ¾÷·Îµå Á¦ÇÑ ¿ìȸ Ãë¾àÁ¡(CVE-2015-0340)
¡âÁ¤¼ö ¿À¹ö Ç÷οì Ãë¾àÁ¡(CVE-2015-0338)
¡âUse-After-Free Ãë¾àÁ¡(CVE-2015-0341 ~ 0342)
¡ã¿µÇâ ¹Þ´Â ¼ÒÇÁÆ®¿þ¾î
Windows, Mac ȯ°æÀÇ Adobe Flash Player desktop runtime »ç¿ëÀÚ´Â Adobe Flash Player17.0.0.134 ¹öÀüÀ¸·Î ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÏ°í, Adobe Flash Player Extended Support Release »ç¿ëÀÚ´Â 13.0.0.277 ¹öÀüÀ¸·Î ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÏ¸é µÈ´Ù.
Linux ȯ°æÀÇ Adobe Flash Player »ç¿ëÀÚ´Â 11.2.202.451 ¹öÀüÀ¸·Î ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÏ°í, Google Chrome¿¡ Adobe Flash Player¸¦ ¼³Ä¡ÇÑ »ç¿ëÀÚ´Â ÀÚµ¿À¸·Î Adobe Flash Player 17.0.0.134ÀÌ Æ÷ÇÔµÈ ÃֽŠ¾÷µ¥ÀÌÆ®°¡ Àû¿ëµÈ´Ù.
Windows 8.xÀÇ Internet Explorer¿¡ Adobe Flash Player¸¦ ¼³Ä¡ÇÑ »ç¿ëÀÚ´Â ÀÚµ¿À¸·Î Adobe Flash Player 17.0.0.134ÀÌ Æ÷ÇÔµÈ ÃֽŠ¾÷µ¥ÀÌÆ®°¡ Àû¿ëµÈ´Ù.
¶Ç´Â ÀÚµ¿ ¾÷µ¥ÀÌÆ®¸¦ ÀÌ¿ëÇÏ¿© Adobe Flash Player 17.0.0.134 ¹öÀüÀ¸·Î ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÒ ¼ö ÀÖ´Ù. Flash Player¹öÀü È®ÀÎ ¹× ÀÚµ¿ ¾÷µ¥ÀÌÆ® ¼³Á¤ ¹æ¹ýÀº ´ÙÀ½°ú °°´Ù.
1. Á¦¾îÆÇ¿¡¼ Flasy Player¸¦ Ŭ¸¯(¾ÆÀÌÄÜÀÌ º¸ÀÌÁö ¾ÊÀ» °æ¿ì º¸±â ±âÁØÀ» ¡®Å« ¾ÆÀÌÄÜ¡¯À¸·Î º¯°æ
2. Flash Player¼³Á¤ °ü¸®ÀÚ¿¡¼ ¾÷µ¥ÀÌÆ®ÅÇ Å¬¸¯ ÈÄ ¡®Adobe°¡ ¾÷µ¥ÀÌÆ®¸¦ ¼³Ä¡Çϵµ·Ï Çã¿ë(±ÇÀå)¡¯ Ŭ¸¯
±âŸ ÀÚ¼¼ÇÑ »çÇ×Àº ¾Æ·¡ÀÇ Âü°í»çÀÌÆ®¸¦ È®ÀÎÇϰųª Çѱ¹ÀÎÅͳÝÁøÈï¿ø ÀÎÅͳÝħÇØ´ëÀÀ¼¾ÅÍ(±¹¹ø¾øÀÌ 118)·Î ¹®ÀÇÇÏ¸é µÈ´Ù.
[Âü°í»çÀÌÆ®]
1. https://helpx.adobe.com/security/products/flash-player/apsb15-05.html
[¿ë¾î Á¤¸®]
Type Confusion : °´Ã¼ÀÇ Å¸ÀÔ(type)À» È¥µ¿ÇÏ¿© ¹ß»ýÇÏ´Â ¿À·ù ¹× Ãë¾àÁ¡
Use-After-Free : ¼ÒÇÁÆ®¿þ¾î ±¸Çö ½Ã µ¿Àû ȤÀº Á¤ÀûÀ¸·Î ÇÒ´çµÈ ¸Þ¸ð¸®¸¦ ÇØÁ¦ÇßÀ½¿¡µµ ºÒ±¸ÇÏ°í À̸¦ °è¼Ó ÂüÁ¶(»ç¿ë)ÇÏ¿© ¹ß»ýÇÏ´Â Ãë¾àÁ¡
[¹Î¼¼¾Æ ±âÀÚ(boan5@boannews.com)]
<ÀúÀÛ±ÇÀÚ: º¸¾È´º½º(www.boannews.com) ¹«´ÜÀüÀç-Àç¹èÆ÷±ÝÁö>