Flash flaw puts most sites, users at risk, say researchers

http://www.computerworld.com/s/arti...sk_say_researchers?taxonomyId=17&pageNumber=1
and here:
http://skeptikal.org/2009/11/flash-origin-attack-faq.html

 

From reading on another forum I'm aware that disabling or limiting Flash can stop this vulnerability. What I'm not sure of is how this thing would steal your information. Does it trigger a drive-by download like typical exploits?

The reason I'm concerned is that some of the sites I visit uses Flash and contains content (pics, videos) uploaded by users. I also disable NoScript when shopping online so everything goes smooth. I guess if the site used a separate server then there would be no problem but that would take time to research.

If anyone has any details I would sure appreciate it. I can deal with remote executable but browser/plugin only exploits are a little tougher to deal with other than disabling the plug-in.