Flash Player 9.0.124 Security Killing Me

Hello all;
I am not a system admin but I am responsible for moving our
projects up to the servers and developing. I have recently built a
rather neat project using the import web service(WSDL) tool from a
.Net web service project and noticed that it was running fine on my
local box. I moved it to a dev server and we began to notice that
certain browsers would display fine and others would not. After an
entire day, I have finally realized that it was due to the version
of Flash player that was running in each browser.
I have read all of the documents that were posted at the head
of this forum, and think I have done everything correctly. I even
went back and installed Flash 9.0.124 on both Firefox and IE on my
local machine hoping that Flex Builder would give me some help in
why my application was stalling out when it connected to the web
service site.
I have added the following to my crossdomain.xml file in the
web service site:
Can someone tell me exactly what else I need to do? We are
running Windows Server 2003 if that helps. Do I need to set up a
web site on port 843 to do the socket policy thing? We don't have
any great national secrets or anything, we just need my Flex
project to connect to a web service and pull back some data.
The code I included is in a crossdomain.xml file located at
the root of the web service project, and the same code is in the
root of my Flex .Net container project, and practically every other
place I can think to put it.
Thank you so much! And if you can get me straight by tomorrow
morning, I'll owe you a case of beer. BTW I even tried doing the
permitted-cross-domain-policies="all" everywhere and that didnt
work either.

I fixed it.
The key to the universe:
<allow-http-request-headers-from domain="*"
headers="*"/>

Similar Messages

Flash Player 9.0.124.0 made U-Tube stop working

Just like the topic title suggests. I installed the newest
version of Adobe Flash Player (9.0.124.0) after a notification
alerted me to new security updates for the flash player. I
installed the new version, went to Youtube to play a video and I
get the message saying:
"Hello, you either have JavaScript turned off or an old
version of Adobe's Flash Player. Get the latest Flash player."
for every video!
I installed it this afternoon, and this morning before the
install I could play videos on Youtube, AOL, and other Flash
sites... Last night I could play flash on Youtube, AOL, etc. But
the moment I installed the new version I couldn't play anything.
Despite my like of being secure, I really want to watch
Youtube videos. I double-checked my JavaScript settings in Internet
Explorer (which is my main browser, secondary is AOL which is also
effected), and still I cannot view videos.
Please, can someone out there assist me?

Apparently the proper procedure for upgrading to the Adobe
Flash Player 9 is to first completely uninstall the current play
and do a fresh install of the new player, otherwise there could be
problems.
Also, you cannot really uninstall using the control panel
because all ofthe files may not be deleted unless you are
knowledgable enough to know that all versions and programs which
may be running flash player are all shut down.
I'm not sure why Adobe doen't tell people this. I discovered
it by accident myself. Here are the ADOBE links with all the
instructions.
Apparently, it is not enough to apply a straight upgrade to
Flash. You actually have to uninstall Flash in it's entirety, and
then do a fresh Flash install. There's a specific program for this
which can be downloaded from Adobe (the makers of Flash) at:
Windows Uninstall File:
http://download.macromedia.com/pub/flashplayer/current/uninstall_flash_player.exe
Mac OS X Uninstall File:
http://download.macromedia.com/pub/flashplayer/installers/8/uninstall_flash_player_osx.dmg
To understand more about how to unistall your Flash Player
and plugins read the following article:
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=tn_14157
To check your version of Flash and get the latest and
greatest Flash players, go to:
http://www.adobe.com/shockwave/welcome/

GETURL is not working in flash player 9.0.124.0.

Dear Friends,
My swf and my html are in different domain so i got a issue
in GETURL function , It is not working in flash player 9.0.124.0.
in IE browser so that i add one parameter like allowScriptAccess
=always then its working fine.but my question is what will happed
if they will introduce any new flash version in future please tell
me what is the permanent solution for this issue.
Thanks

There is no way to know what will change in the future. This
is the solution that works now. It will probably remain in place
for the reasonable future.

Regarding security update for Flash Player 9 (Flash Player 9,0,124,0)

We are facing issue in STOMP client because of newly
implemented restriction on flash player.(
http://www.adobe.com/devnet/flashplayer/articles/flash_player9_security_update.html).
Because of this, Our STOMP client is not able to get messages
from activemq.
We have tried to add socket meta files as discussed in others
article but we were not able to get solutions.
We have done below stuffs.
1) Added LoadPolicy code in stompclient for getting
policyfile from server running on 80 port.
2) Also set xmlSocket as load policy to get connection from
stompclient to Activemq.
1) PolicyFile.xml(loading this also in STOMPClient.swf)
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM
"/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>

<site-control
permitted-cross-domain-policies="master-only"/>


<allow-access-from domain="*" to-ports="*" />
</cross-domain-policy>
2) Flash players logs(using debug version of Flash player)
Error: Request for resource at xmlsocket://192.168.1.12:61613
by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
is denied due to lack of policy file permissions.
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/ladyguinn.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
Warning: Timeout on xmlsocket://192.168.1.12:61613 (at 3
seconds) while waiting for socket policy file. This should not
cause any problems, but see
http://www.adobe.com/go/strict_policy_files
for an explanation.
Error: Request for resource at xmlsocket://192.168.1.12:61613
by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
is denied due to lack of policy file permissions.
OK: Root-level SWF loaded:
http://mail.google.com/a/sigmainfo.net/im/sound.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/ladyguinn.swf
OK: Root-level SWF loaded:
http://mail.google.com/a/sigmainfo.net/im/sound.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/bill.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/bill.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/bill.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
Warning: Ignoring <site-control> tag in policy file
from
http://192.168.1.12:843/policyfile.xml.
This tag is only allowed in master policy files.
Warning: Domain 192.168.1.12 does not specify a meta-policy.
Applying default meta-policy 'all'. This configuration is
deprecated. See
http://www.adobe.com/go/strict_policy_files
to fix this problem.
OK: Root-level SWF loaded:
http://192.168.1.12/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://192.168.1.12/blackwells/bid/ladyguinn.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.47:61613 by requestor from
http://192.168.1.12/blackwells/bid/stompclient.swf
Warning: [strict] Ignoring policy file at
xmlsocket://192.168.1.47:843 due to incorrect syntax. See
http://www.adobe.com/go/strict_policy_files
to fix this problem.
Warning: Timeout on xmlsocket://192.168.1.47:61613 (at 3
seconds) while waiting for socket policy file. This should not
cause any problems, but see
http://www.adobe.com/go/strict_policy_files
for an explanation.
Error: Request for resource at xmlsocket://192.168.1.47:61613
by requestor from
http://192.168.1.12/blackwells/bid/stompclient.swf
is denied due to lack of policy file permissions.
3) Setting below load policy files in stompclient.mxml
flash.system.Security.loadPolicyFile("
http://" + server + "/crossdomain.xml");
//flash.system.Security.loadPolicyFile("
http://" + server + "/policyfile.xml");
flash.system.Security.loadPolicyFile("xmlsocket://" + server
+ ":"+port);
4) we have also changed crossdomain.xml (this is using Schema
instead of DTD as <site-control > is not there in DTD)
<?xml version="1.0" encoding="UTF-8"?>
<cross-domain-policy xmlns:xsi="
http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="
http://www.adobe.com/xml/schemas/PolicyFile.xsd">
<allow-access-from domain="*" />
<site-control
permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>

You're welcome!
Flash is still the same CPU hog... Good that there's [ClickToFlash|http://rentzsch.github.com/clicktoflash>!

FLASH PLAYER NOT RUNNING ON SECURED COMPUTER

I
believe my problem is similar to the one described here.
We are running Windows Server 2003 with thin clients that RDP
into the server. I have the latest version of Flash player
installed on the server. I have administrative priviledges and I
have no problems but for a secure user they get a message that the
website requires the latest version of flash player. We have many
websites we need to visit that have flash content and we can't. I
assume that it is related to one of two things: 1) Flash player
won't function without administrative priviledges [which would be
absolutely stupid on Adobe's part if this is the case] or 2) there
is a GPO setting preventing it from functioning. I think the latter
is the correct problem. I am not farmiliar enough with the way
Flash player operates so I need a little guidance finding the
correct GPO - any ideas anyone?

When I open Task Manager the only thing I see is "Tasks". I do not see the Processes tab. I have seen this in the past along with measures of other activity, but not anything now. I tried the Start/Search - nothing about Processes.
Once the Task Manager is running, select the Processes tab. On older Windows version you may need to click on the Process Name or Image Name header to sort the process names.
Now right-click on every process that the Flash Player installer needs to close (e.g. iexplore.exe), then select End Process.

Stompclient is not working for Flash Player 9 (Flash Player 9,0,124,0)

We are facing issue in STOMP client because of newly
implemented restriction on flash player.(
http://www.adobe.com/devnet/flashplayer/articles/flash_player9_security_update.html).
Because of this, Our STOMP client is not able to get messages
from activemq.
We have tried to add socket meta files as discussed in others
article but we were not able to get solutions.
We have done below stuffs.
1) Added LoadPolicy code in stompclient for getting
policyfile from server running on 80 port.
2) Also set xmlSocket as load policy to get connection from
stompclient to Activemq.
1) PolicyFile.xml(loading this also in STOMPClient.swf)
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM
"/xml/dtds/cross-domain-policy.dtd">

<cross-domain-policy>

<site-control
permitted-cross-domain-policies="master-only"/>


<allow-access-from domain="*" to-ports="*" />
</cross-domain-policy>
2) Flash players logs(using debug version of Flash player)
Error: Request for resource at xmlsocket://192.168.1.12:61613
by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
is denied due to lack of policy file permissions.
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/ladyguinn.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
Warning: Timeout on xmlsocket://192.168.1.12:61613 (at 3
seconds) while waiting for socket policy file. This should not
cause any problems, but see
http://www.adobe.com/go/strict_policy_files
for an explanation.
Error: Request for resource at xmlsocket://192.168.1.12:61613
by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
is denied due to lack of policy file permissions.
OK: Root-level SWF loaded:
http://mail.google.com/a/sigmainfo.net/im/sound.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/ladyguinn.swf
OK: Root-level SWF loaded:
http://mail.google.com/a/sigmainfo.net/im/sound.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/bill.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/bill.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://127.0.0.1/blackwells/bid/bill.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.12:61613 by requestor from
http://127.0.0.1/blackwells/bid/stompclient.swf
OK: Policy file accepted:
http://192.168.1.12/crossdomain.xml
Warning: Ignoring <site-control> tag in policy file
from
http://192.168.1.12:843/policyfile.xml.
This tag is only allowed in master policy files.
Warning: Domain 192.168.1.12 does not specify a meta-policy.
Applying default meta-policy 'all'. This configuration is
deprecated. See
http://www.adobe.com/go/strict_policy_files
to fix this problem.
3) Setting below load policy files in stompclient.mxml
flash.system.Security.loadPolicyFile("
http://" + server + "/crossdomain.xml");
//flash.system.Security.loadPolicyFile("
http://" + server + "/policyfile.xml");
flash.system.Security.loadPolicyFile("xmlsocket://" + server
+ ":"+port);
4) we have also changed crossdomain.xml (this is using Schema
instead of DTD as <site-control > is not there in DTD)
<?xml version="1.0" encoding="UTF-8"?>
<cross-domain-policy xmlns:xsi="
http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="
http://www.adobe.com/xml/schemas/PolicyFile.xsd">
<allow-access-from domain="*" />
<site-control
permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>
I have also did following,
1) Started activemq on remote machine.
2) Started jetty on 843 port in the same machine were
activemq is running.
3) i put the crossdomain.xml as listed above.
4) i didnt specified explicity loadPolicyFile().
Following are the contents of profiling logs:
OK: Root-level SWF loaded:
http://192.168.1.12/blackwells/bid/stompclient.swf
OK: Root-level SWF loaded:
http://192.168.1.12/blackwells/bid/ladyguinn.swf
OK: Searching for <allow-access-from> in policy files
to authorize data loading from resource at
xmlsocket://192.168.1.47:61613 by requestor from
http://192.168.1.12/blackwells/bid/stompclient.swf
Warning: [strict] Ignoring policy file at
xmlsocket://192.168.1.47:843 due to incorrect syntax. See
http://www.adobe.com/go/strict_policy_files
to fix this problem.
Warning: Timeout on xmlsocket://192.168.1.47:61613 (at 3
seconds) while waiting for socket policy file. This should not
cause any problems, but see
http://www.adobe.com/go/strict_policy_files
for an explanation.
Error: Request for resource at xmlsocket://192.168.1.47:61613
by requestor from
http://192.168.1.12/blackwells/bid/stompclient.swf
is denied due to lack of policy file permissions.
Thanx in advance

See this cool mp3 xml player with visualization, playlist and
skins. Fully customisable. Vector.
http://flashden.net/item/mp3-xml-strongplayerstrong-with-visualization-and-skins-vectorise d/11851

Why does Adobe Reader and Adobe Flash player keep installing McaFee Security Scan on my system?

Whenever I install the Adobe Flash player or Adobe Reader on my system, it downloads and installs McAfee Security Scan Plus at the same time. It does not ask if I want it or not, it instead forces it on me, so I have to then unistall it. I've unistalled it 3 or 4 times in the last week. I DO NOT WANT MCAFEE PRODUCTS on my computer!
Please make this an option, give the users a choice so we don't have to keep removing the stupid thing.

Did you 'Uncheck" the relevant box pointed by the red arrow ? If not you accepted the installation with McAfee.

Flash Player 9.0.124 MSI Problems

I've downloaded the 9.0.124 version of Adobe Flash Player
(both Active_X & Plugin versions), but am not able to put them
into a Group Policy Object. When I try to include them in the GPO,
I receive the message "Add operation failed. Unable to extract
deployment information from the package. Run validation on the
package to ensure that the package is correct." I opened the
package in Orca and ran validation on the package. I received some
error messages, but when I run validation on the 9.0.115 version
through Orca, I received the exact same error messages and I have
successfully pushed out the 9.0.115 version through Group
Policy.

Try Flash Player 8.Flash Player 9 can't stop flash animation of elements out of active part of window in Safari.
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_14266&sliceId=2

WCS 4.2.81.0 and Flash Player 9.0.124.0

Hi,
I have just installed an update of flashplayer (9.0.124.0) and now I have the following in my WCS Homepage:
I can't see the charts and graphics !!! It comes with the following message: Flash Player 9.0.115.0 or higher is required to view this graphic. Get Latest Flash Player
Since 9.0.124.0 is higher than 9.0.115.0 I think someone also could have this problem...
Anyone ? Anyone with a solution ?
And damn ... I don't have a old flash player version available !!!!
UPDATE: it's not working in IE 7, but it's working with firefox 2.0.0.14 !!!!

Thx,
I have re-installed the old flash, but it won't install the old activeX (gives a message that I should install the latest one)...
So broken ...
Anyone with the new version who has no problem with the WCS and IE 7

Can not enter characters under Firfox 3.0.1 + Flash Player 9.0.124

I just updated my Firefox to 3.0.1 and Flash Player's version
is 9.0 r124.
When Buzzword is opened, it just can not input anything. To
delete content
is OK.
There is no such problem with IE7 + Flash Player 9.

Hi,
I'm sorry to hear the you're experiencing a problem with
Buzzword and the latest version of Firefox. Unfortunately, I can't
recreate it here. I'm running Windows XP/SP3 with FF 3.0.1 and FP
9.0.124.0, and am seeing no problems with typing into dialogs or
documents. Where are you seeing the input problem? Are you able to
even Sign In? Can you paste where you can't type?
If others have installed FF 3.0.1 and can post their
experience (positive or negative) here, that would be helpful as we
try to figure out what might be happening.

HP printer software includes old flash player that poses critical security risks

I would like to use the HP Solution Center for a Photosmart C309a printer but the HP software includes an older flash player (Adobe Flash Player 9.0 r115) that poses critical security risks.
HP includes this old flash version at:
C:\Program Files (x86)\HP\Digital Imaging\help\player\FlashPla.exe
Is there a way to update this HP program file to a safe version of Flash Player?
I think this is a generec security issue, but if it helps I run Windows 7 64-bit.

Hello dghdah,
Welcome to the HP Forums, I hope you enjoy your experience! To help you get the most out of the HP Forums I would like to direct your attention to the HP Forums Guide First Time Here? Learn How to Post and More.
I understand you are looking for an updated version of Adobe Flash Player to use with Solution Center. When you install the Solution Center, normally Windows would skip the older version as your OS may have an up to date version. If this is not the case and the older version installed, you would need to update the flash player. Below I have linked you to the Adobe website to complete the update.
Adobe Flash Player Support Center
Best wishes,
R a i n b o w 7000I work on behalf of HP
Click the “Kudos Thumbs Up" at the bottom of this post to say
“Thanks” for helping!
Click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution!

Does disabling hang protection in the flash player add on compromise security?

The flash player add on kept crashing. Support recommendations after all updates were installed was to disable hang up protection. I just wondered if this would compromise security.

It shouldn't affect security, but can affect the stability regarding crashes.
See also http://kb.mozillazine.org/Plugin-container_and_out-of-process_plugins

Flash Player For 911 Homeland Security News Video.

Can I install Adobe Flash Player 10. Adobe Reader 9.5.1 is on my computer Windows 7.

There's nothing to stop you doing so, but why would you want to?

Install Flash Player 9 on a secured Intranet

We need to update all flash players in the company to version
9 to get Flex build apps available.
We tried the Flash Player Detection Kit and Flash Player
auto-update without succes!
Problem is we have a few 1.000 employees without Interent
access and without install rights on their desktop/notebook. So we
need to do a 'quiet' installation/update from within our company
Intranet. Is this possible?
Ps.: MSM is not an option (for the moment).
Is this possible?

Seems like this is not possible though.
Maybe Adobe should prior take care of an easy way to
distribute their latest Flash player over an Intranet.
Without that Flex is useless for Intranet developers.

Update Flash Player to 9.0.124.0 Problems

I uninstalled flash player 9.0.115.0 and then installed new
version of Flash Player 9.0.124.0
I now have 3 places it is installed in compared to the 2 I
had before.
It is now located in :
C:\WINDOWS\SYSTEM32\Macromed\Flash\Flash9f.ocx
C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll
C:\WINDOWS\SYSTEM32\Macromed\Flash\NPSWF32.dll
Before I installed new version of flash player 9.0.124.0 I
had version 9.0.115.0 and this is where files were located:
C:\WINDOWS\SYSTEM32\Macromed\Flash\Flash9e.ocx
C:\WINDOWS\SYSTEM32\Macromed\Flash\NPSWF32.dll
I am not sure what to do with the extra location of the file
NPSWF32.dll or if it necessary to do anything at all.
I would appreciate anyone’s input.
Thanks-----Dudley28

This site will help with more generall information and will
make a little more sence of your problem.
http://www.cnet.com/8301-13554_1-9837179-33.html
Here is what I did. Need to completely uninstall your current
versions. One way to see where they are all located is to go to
secunia.com and run their software inspector. Use the Scan Online
then left click on start then check the enable thorough system
inspection and left click start again. will take about 3-5 minutes
to run. note all the version of flash player and where they are
installed. May want to print.
Get the uninstall_flash_player.exe from this sight
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_14157&sliceId=1
Use the Windows version if that is what you have and run it.
I also use Registry Supreme Pro and run their Registry
cleaner and Software Manager to cleanup any registry keys
If you do not have that check here To manually uninstall the
ActiveX control
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_12727
Reboot
Try Secunia again to see if uninstalled.
If it has been removed then try installing the Flash Player
9.0.124 from
www.adobe.com/go/getflash
I do a clean install using a free program called enditall.

Flash Player 9.0.124 Security Killing Me

Similar Messages

Maybe you are looking for