Feeds

Adobe goes out of band to fix frightful Flash flaw

Company warns of active attacks on browsers

Remote control for virtualized desktops

Adobe has issued an out-of-band fix to address what the company warns is an actively-targeted vulnerability in its Flash media plug-in.

The company said that the Flash 12.0.0.44 update would address a remote code execution vulnerability present in the Windows, OS X, and Linux versions of Flash Player. Users running Chrome and Internet Explorer will automatically download the update through their browsers, while other users can obtain the fix through Adobe's Download Center.

Adobe said that if targeted, the integer underflow vulnerability could cause a crash that would allow an attacker to remotely execute code and possibly take control of a targeted system.

According to the company, there have been reports of the flaw being actively targeted in the wild, prompting a high deployment priority on the Windows and OS X versions of the patch. Adobe considers the Linux update to be a lower priority at the moment.

That the company would release the update outside of its normal monthly security update schedule would indeed suggest that the flaw is a serious issue. Such out-of-band releases are fairly uncommon among companies with monthly updates, and are usually only issued when a serious vulnerability is being actively targeted.

According to security researcher and blogger Graham Cluley, the high-profile of Flash and the history of attackers targeting Adobe tools should motivate users and administrators to patch their systems quickly.

"Clearly Adobe thinks the issue is serious if it is taking the step to issue an out-of-band security patch," Cluley said in a blog post.

"In the past Adobe security flaws have been exploited widely by online criminals to infect unprotected computers, so internet users would be wise to take the threat seriously and patch their systems as appropriate." ®

Choosing a cloud hosting partner with confidence

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
Why CIOs should rethink endpoint data protection in the age of mobility
Assessing trends in data protection, specifically with respect to mobile devices, BYOD, and remote employees.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.