IE 10 Flash Flaw Fix for New OS

Tuesday, September 25, 2012 @ 03:09 PM gHale


Hot on the heels the update that fixed the Zero Day flaw in Internet Explorer versions 7, 8, and 9, Microsoft released a separate patch that solves issues related to the Adobe Flash Player component of Internet Explorer 10.

The current Flash vulnerabilities only affect IE 10 running on Windows 8 and Windows 2012 server, meaning most Windows users are in the clear. But although Microsoft’s newest operating systems have yet to ship to retail customers, they are already available to volume licensees and subscribers to Microsoft’s MSDN and TechNet programs.

RELATED STORIES
IE 10 gets Flash Fixes
IE Update for Zero Day Ready
IE Zero Day Targeted Attacks
Blackhole Updates Product Offering

Previous versions of IE displayed Flash content using Adobe’s Flash Player plugin. But in IE 10, Microsoft made Flash an integral part of the browser, with the goal of providing a “plugin-free” browsing experience. As a result, Flash security fixes for IE 10 must come from Microsoft, not Adobe.

Initially, Microsoft said it wouldn’t offer a patch for the flaws until after Windows 8’s official launch date, but it recanted after it drew criticism from users who worried the delay meant IE 10 patches would lag behind Adobe’s own bug fix cycle.

Yunsun Wee of Microsoft’s Trustworthy Computing said Friday there would be a fix.

Wee also said Microsoft will “coordinate” with Adobe to release IE 10 patches in conjunction with Adobe’s regular, quarterly update cycle. In addition, the software giant will issue emergency updates outside of its own monthly security bulletin cycle, should the “threat landscape” require it.

The current fix is available via Windows Update, so most Windows 8 and Windows Server 2012 users should receive it without taking any action, unless they’ve disabled automatic updates.



Leave a Reply

You must be logged in to post a comment.