Feeds

Adobe fixes critical Shockwave bugs with neanderthal patch

Manual uninstall required

Choosing a cloud hosting partner with confidence

The critical patches for Adobe Systems software keep coming. This time, they fix serious security bugs in the company's Shockwave Player.

Adobe on Wednesday pushed out updates for Shockwave 11.5.2.602 and earlier on Windows and Mac operating systems. The patches fix multiple integer overflow and buffer overflow flaws that can be exploited to execute malicious code on computers that use the software.

Adobe is strongly urging users to upgrade, but the pill they are recommending isn't the easiest to swallow. Unlike the vast majority of today's patches, the Shockwave fix requires users manually uninstall the out-of-date version, reboot their systems, and then install the latest version. For an application with more than 450 million installations, that's downright primitive.

More importantly, making it inconvenient for users to upgrade is a guarantee that a sizable portion of them will remain vulnerable. Adobe has recently unveiled an automatic updater for its Reader application. It's about time the software maker made seamless updating for Flash and Shockwave standard too.

The critical patch, assuming it's installed, will update Shockwave to version 11.5.6.606. Adobe thanked Alin Rad Pop of Secunia Research for reporting the bugs. ®

Beginner's guide to SSL certificates

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.