With all the talk about Adobe Flash possibly being phased out for HTML 5 recently, what Adobe does not need at the moment is a major security vulnerability in Flash and Acrobat that opens up your entire computer to hackers.
Yet this is exactly what has happened.
This vulnerability (CVE-2010-1297) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat.
This text is from the latest security advisor from Adobe and Adobe recommends all users of Flash to upgrade to the release candidate test version of Adobe Flash 10.1. A fix for the current Flash version 10.0.x will not come until June 10th.
This exploit is already in full use by World of Warcraft trojans that will steal your game password.
So, you have two choices at the moment:
- Ignore it. You then risk having multiple trojans installed on your computer.
- Install the test version of Flash 10.1. You might get more crashes since this is a test version of a major update to the Flash player but you should get no trojans.