Adobe Fixes Flash Flaws

Friday, September 12, 2014 @ 04:09 PM gHale


Adobe released a critical security update for Flash Player that fixes 12 security vulnerabilities, but pushed back its planned patches for Reader and Acrobat by a week.

The Flash Player updates, available for Windows, Mac and Linux, takes care of nine vulnerabilities that could lead to remote code execution and three that can allow attackers to bypass security features, including memory address randomization and the same-origin policy.

RELATED STORIES
Patch Tuesday: IE Zero Day Fixed
Adobe Issues Planned, Unplanned Patches
Flash Trojan Targets Android Devices
New Tool to Create Malicious PDFs

Windows and Mac users should update to Flash Player 15.0.0.152 and Linux users to Flash Player 11.2.202.406, Adobe said in its security advisory. Users of the Flash Player Extended Support release should update to version 13.0.0.244, the company said.
http://helpx.adobe.com/security/products/reader/apsb14-20.html

The Flash Player versions bundled with Google Chrome, Internet Explorer 10 and Internet Explorer 11 will update automatically through the update mechanisms of those browsers.

The company also released new versions of Adobe AIR for Windows and Android, because the runtime also includes Flash Player. The patched Adobe AIR version for Windows is 15.0.0.249 and for Android 15.0.0.252.

Adobe also planned to release security updates Tuesday for Reader and Acrobat as part of its patch cycle, which aligns with Microsoft’s. However, the company rescheduled those updates for next week in order “to address issues identified during routine regression testing.”



Leave a Reply

You must be logged in to post a comment.