Government // Mobile & Wireless
10:47 PM
Connect Directly
Repost This

Adobe Patches A Dozen Serious Flash Vulnerabilities

Android users at risk to compromise through malicious Flash objects, creating the potential for drive-by attack.

Adobe released updated versions of the Flash Player and Air for PCs and Android devices today. In the security advisory describing the update Adobe lists a dozen serious vulnerabilities that are fixed in the new versions.

The affected products are:

  • Adobe Flash Player and earlier versions for Windows, Macintosh, Linux and Solaris operating systems
  • Adobe Flash Player and earlier versions for Android
  • Adobe AIR 3.0 and earlier versions for Windows, Macintosh, and Android

Android users usually have to wait for their carrier to issue an update and obtain it through them will get their updates through the Android Market. Desktop computer users can obtain the latest version of Flash at the Adobe Flash Player Download Center. Never download Flash from any other site but Adobe's; fake versions of the Flash Player are often used to distribute malware.

Adobe recently announced that they would not develop Flash for mobiles anymore. Apart from a market desire for more standards-based technology, regular critical vulnerability fixes have been hard on both Adobe and users.

Adobe's PDF standard includes complete support for embedded Flash objects, so you can expect updates soon for Acrobat and Reader to address these same problems.

Comment  | 
Print  | 
More Insights
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Government, May 2014
NIST's cyber-security framework gives critical-infrastructure operators a new tool to assess readiness. But will operators put this voluntary framework to work?
Twitter Feed
Audio Interviews
Archived Audio Interviews
GE is a leader in combining connected devices and advanced analytics in pursuit of practical goals like less downtime, lower operating costs, and higher throughput. At GIO Power & Water, CIO Jim Fowler is part of the team exploring how to apply these techniques to some of the world's essential infrastructure, from power plants to water treatment systems. Join us, and bring your questions, as we talk about what's ahead.