[technology taskforce] ICANN blog : ICANN suspends use of Adobe Connect at. ICANN61 due to security issue

[Raitme Citterio]

Hi Dev

Due to this problem. which is still recurrent within the adobe platform due
to the use of the swf format.

I think it would be an opportunity to change the platform since similar
services such as zoom, whose cost is 50% lower in relation to the cost of
adobe.

https://zoom.us/pricing
https://www.adobe.com/products/adobeconnect/buying-guide.html

Besides the advantage in the case of zoom to work with the webrtc protocol
(developed in the ietf), which allows to be light and multiplatform,
besides working with any type of connection to the internet and the
valuable function in the case of corporate plans to create a recording
immediately of an mp4 file, which can be placed within the ICANN youtube
channel.

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Libre
de virus.www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#m_-4870086568832205972_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

Raitme Citterio
4FE7 B994 C1CF 2815 at pgp

2018-03-14 6:52 GMT-04:00 Dev Anand Teelucksingh <devtee at gmail.com>:

> From
>
> https://www.icann.org/news/blog/issues-with-adobe-connect-at-icann61
>
>
> “....*"Yesterday we were notified by a member of
> the Security and Stability Advisory Committee of what appears to be a
> potentially serious security issue affecting our use of Adobe Connect.*
>
> *In order to protect the members of the multistakeholder community, and
> out of an abundance of caution, we have suspended our Adobe Connect
> services. This means that Adobe Connect services will not be available for
> the rest of ICANN61.”*
>
>
> Livestream and streaming audio will be available.
>
>
> The security issue regarding Adobe Connect is likely the one posted by
> Adobe on “patch Tuesday”
>
>
> https://helpx.adobe.com/security/products/connect/apsb18-06.html
>
>
> “Adobe has released a security update for Adobe Connect. This update
> resolves an unrestricted SWF file upload vulnerability (CVE-2018-4921),
> which could be exploited to conduct cross-site scripting attacks. This
> update also resolves an OS command injection vulnerability in the Adobe
> Connect URI handler on Windows (CVE-2018-4923) that could result in
> unintended arbitrary local file removal or forced uninstall of the
> application. ”
>
>
> Dev Anand
>
> _______________________________________________
> ttf mailing list
> ttf at atlarge-lists.icann.org
> https://mm.icann.org/mailman/listinfo/ttf
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/ttf/attachments/20180314/cc03cf97/attachment.html>