
For the second
consecutive month, Microsoft has to face some difficulties with one of its security bulletins, which are released on the second Tuesday of every month.
This month's security patches were a novelty because Microsoft started to fix vulnerabilities in software applications
which don't belong to the software behemoth.
The security bulletin with issues only targets vulnerabilities in Adobe's Macromedia Flash Player, and has the identifier MS06-020.
Both problems solved by the MS06-020 bulletin are linked to the way the player handles Flash Animation (SWF) files. An attacker could exploit the vulnerability by constructing a specially crafted Flash Animation (SWF) file that could potentially allow remote code execution if a user visited a Web site containing the specially crafted SWF file or viewed an e-mail message containing the specially crafted SWF file as an attachment. A successful exploitation would allow the attacker to take complete control of the affected system.
According to TechWeb.com, for certain systems, the attempt to update Adobe's application fails miserably, with repeated notifications that the process has failed.
Microsoft says that this error occurs when a user had installed Flash Player 7 or 8 on a machine that previously had version 6, then later uninstalled version 7 or 8.
Last month, the changes introduced by MS06-015 caused an application to stop responding during specific interactions with older versions of Hewlett Packard's "Share-to-web" software utility, or older NVIDIA video card drivers. Microsoft remedied the problem by releasing a new version of the bulletin.