New Adobe Flash Attack -Fix is out

[Phone Man]

Another attack on Flash has been announced by Adobe.

Adobe - Security Advisories: APSA10-03 - Security Advisory for Flash Player

May be fixed the week of Sept 27.
I have just stated using a FF addon call QuickJava which has buttons on the Status Bar to disable/enable flash and others on the go.

https://addons.mozilla.org/en-US/firefox/addon/1237/

Jim

 

[JMH]

Adobe Warns of Attacks on New Flash Flaw

Adobe Systems Inc. warned Monday that attackers are exploiting a previously unknown security hole in its Flash Player, multimedia software that is installed on most computers.

Adobe said a critical vulnerability exists in Adobe Flash Player versions 10.1.82.76 and earlier, for Windows, Mac, Linux, Solaris, UNIX and Android operating systems. In a security advisory, Adobe warned that the flaw could cause Flash to crash and potentially allow an attacker to seize complete control over an affected system.

Worse still, there are reports that this vulnerability is being actively exploited in the wild against Adobe Flash Player. Adobe’s advisory states that while the latest versions of Adobe Acrobat and Reader also contain the vulnerable Flash components, the company is not aware of attacks against the Flash flaw in those programs.

That last bit may be of little comfort to Adobe Acrobat and Reader users: Last week, Adobe issued a similar advisory warning that hackers were attacking an as-yet unpatched critical flaw in both of those programs.

More -
Adobe Warns of Attacks on New Flash Flaw — Krebs on Security

 

[Lomai]

Thanks Jan for the information.
I just updated my flash player yesterday after installing Firefox 3.6.9

 

[Corrine]

Thanks, Jim.

 

[saakeman]

this must be fixed before many pc's crash or get broken by some smart ass

thanks
saakeman(d)

 

[Borg 386]

Thank you....I added the add on.

Have you ever thought how bored hackers would be without Adobe around?

 

[pparks1]

2-3 weeks for a fix for a known vulnerability in the wild. That's not so nice.

 

[Hopalong X]

I won't be playing my Flash games for a while.
I dumped Adobe Reader already for FoxIt.
It just didn't make sense to have that big program to read a .pdf.

Seemed to make as much sense as to install MS Office to read a Notepad document.

Thanks for the info update.
Mike

 

[pparks1]

It just didn't make sense to have that big program to read a .pdf.

Yeah, I switched over to FoxIt about 3 years ago and have never looked back. Reader is just too big, too much to install, too long to start up, etc.

 

[neeraj]

thanx for the info buddy..

 

[Hopalong X]

All these security problems.

Makes you wonder where the Flash 64bit is.
Seems like MS should drop them an email to let them now 64bit is here. For about the past 8 years or so.:shock:

DOH!:drool:

 

[pparks1]

is here. For about the past 8 years or so.:shock:

DOH!:drool:

While 64-bit has in existence for 8 years or so...for a majority of the market place, the adoption of 64-bit has just started taking off with Windows 7. It was very rare to find an XP or Vista 64-bit machine for sale in the past...but you can find Windows 7 machines running 64-bit nearly everywhere.

 

[Lebon14]

Instead of talking, I think they should work on correcting this flaw >_>

 

[JMH]

Flash Player Security Updates to Land on Monday

Adobe has announced that a new batch of Flash Player security updates are expected to land on Monday, September 20, and will include a fix for an actively exploited critical vulnerability.

At the beginning of the week, the company revealed that a new arbitrary code execution has been discovered in Flash Player 10.1.82.76, currently the latest version of the application.

It also warned that the bug, identified as CVE-2010-2884, is being exploited in the wild and announced plans to deliver a patch during the week of September 27.

Yesterday, the company amended its security advisory to announce that the patch has been pushed forward and will ship on Monday.

The upcoming updates will be available for all supported operating systems – Windows, Macintosh, Linux, Solaris, and Android.

More -
Flash Player Security Updates to Land on Monday - Softpedia

 

[G1LLY]

Nice to see that Google Chrome users got this Flash update early in version 6.0.472.62 which was released yesterday.

Google Chrome Releases: Stable, Beta Channel Updates

 

[Phone Man]

UPDATE

Updated advisory. Flash fix to be out on Monday Sept 20 but Reader and Acorbat will have to wait until Oct 4. Also information on update to Chrome.

Adobe - Security Advisories: APSA10-03 - Security Advisory for Flash Player

Jim

 

[Gornot]

IMHO I'd be glad to see Flash completely replaced by Silverlight sometime in the future X)

 

[24c]

It just didn't make sense to have that big program to read a .pdf.

Yeah, I switched over to FoxIt about 3 years ago and have never looked back. Reader is just too big, too much to install, too long to start up, etc.

I did too, at the suggestion of someone on this site.

 

[marsmimar]

It just didn't make sense to have that big program to read a .pdf.

Yeah, I switched over to FoxIt about 3 years ago and have never looked back. Reader is just too big, too much to install, too long to start up, etc.

I did too, at the suggestion of someone on this site.

In case anyone is interested, there's another free PDF reader called Nitro. It says it's in Beta but so far I haven't seen any problems (using it for a few months now.)

 

[Dave76]

Nitro is good, no problems with it.