In semi-related news, a Russian security group warns they have found attackers exploiting a zero day Adobe Reader X vulnerability in the wild. I recommend you update any Flash capable device as soon as you can. These vulnerabilities also affect other platforms as well, though not as severely. Though it doesn’t look like attackers are exploiting these Flash flaws in the wild yet, Adobe rates them as “ Priority 1” for Windows users, and recommends you apply the Windows updates within 72 hours. If your Windows users have local administrator privileges, an attacker could exploit this flaw to gain full control of their PCs. That said, Adobe does warn that if an attacker can entice one of your users to visit a malicious website containing specially crafted Flash content, he could exploit any of these flaws to execute code on that user’s computer, with that user’s privileges. It doesn’t describe the flaws in much technical detail, other than mentioning they consist of buffer overflow vulnerabilities and other types of memory corruption flaws. This week, Adobe released a security bulletin describing seven security vulnerabilities (based on CVE numbers) that affect Flash Player running on any platform. It runs on many operating systems, including mobile operating systems like Android.
#UPDATE ADOBE ACROBAT READER FLASH INSTALL#
Although Flash is optional, 99% of PC users download and install it to view multimedia web content. What to do: Download and install the latest version of Adobe Flash Player for your platform (see Solution section for Reader X flaw mitigation)Īdobe Flash Player displays interactive, animated web content called Flash.Impact: In the worst case, an attacker can execute code on the user’s computer, potentially gaining control of it.How an attacker exploits it: By enticing users to visit a website containing malicious Flash content (or into downloading and opening a malicious PDF).These vulnerabilities affect: Adobe Flash Player running on all platforms, Adobe Air, and all versions of Reader X.
0 kommentar(er)
