 Click to enlarge |
Although Adobe has rated the issue critical, it has not issued a patch, but it has included a way for users to work around the problem in the advisory.
The bug, affects all major browsers including Microsoft's Internet Explorer, Apple's Safari and Mozilla's Firefox. A Flash Player update that will be issued at the end of this month is said to address the issue.
Clickjacking, while not new, is not something that is talked about much according security analyst Chris Rodriguez when talking to TechNewsWorld.
"[Clickjacking] comes in many different forms…However, Adobe's security bulletin is in response to some really nefarious stuff that has been a hot topic lately. Someone has figured out how to use clickjacking to gain access to the user's microphone and webcam. Now that's some scary stuff," he told TechNewsWorld. And he is not convinced that a "More importantly, Adobe has only provided a workaround and has not released a patch. Even when a fix is available, Adobe Flash updates are not usually a part of enterprise patch management cycles. We expect that Adobe is working around the clock to fix this problem and until then, users are at risk unless they research, understand and take the recommended measures against this threat," he added.