A fix made to Adobe Flash's web privacy settings panel blocks a clickjack attack that could allow malicious sites to turn on webcams and microphones and eavesdrop without warning.