Feeds

Adobe patches critical Flash Player vuln under attack

One down, one to go

Build a business case: developing custom apps

Adobe Systems has patched a critical vulnerability in its ubiquitous Flash Player that has been under active attack for at least a week.

The company on Monday issued an update for Flash Player 10.1.82.76 and earlier versions for Windows, Macintosh, Linux, and Solaris, and Adobe Flash Player 10.1.92.10 for Android handsets. Adobe has disclosed few details about the threat other than to say it allows attackers to take complete control of computers running the application and that there are reports that it is being “actively exploited in the wild against Adobe Flash Player on Windows.”

The vulnerability also affects fully patched installations of Adobe Reader and earlier versions, for Windows, Macintosh, and Unix, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh. Adobe has no reports the vulnerability in those programs is being exploited.

Monday's patch closes one of two known zero-day vulnerabilities being used to attack Adobe users. As previously reported, a highly sophisticated attack spreading by email attempts to install malware on Windows machines by tricking recipients into opening a booby-trapped PDF file. The underlying stack overflow vulnerability affects non-Windows versions of Reader as well.

Adobe has said a patch for that bug will be released the week of October 4.

As usual, Windows-based Flash users who surf the web with Firefox or another browser other than Internet Explorer will have to install the patch at least twice to be fully protected. Users are reminded to uncheck the box hawking free software such as McAfee Security Scan when updating. ®

Next gen security for virtualised datacentres

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Scale data protection with your virtual environment
To scale at the rate of virtualization growth, data protection solutions need to adopt new capabilities and simplify current features.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?