IoT
Government // Mobile & Wireless
News
8/21/2012
05:20 PM
Connect Directly
Twitter
Facebook
Google+
LinkedIn
RSS
E-Mail
50%
50%

Updates To Adobe Flash, AIR Affect Mobile Devices

6 vulnerabilities in Flash Player and AIR could leave users open to hackers. Updates are available.

Adobe has issued updates to its Adobe Integrated Runtime (AIR) and Flash Player products to address vulnerabilities in them. The affected products are Flash Player 11.3.300.271 and earlier versions for Windows, Macintosh and Linux; Flash Player 11.1.115.11 and earlier versions for Android 4.x; and Flash Player 11.1.111.10 and earlier versions for Android 3.x and 2.x.

The Security Bulletin (APSB12-19) describes six vulnerabilities. Four of the bugs fixed are memory corruption vulnerabilities that could lead to code execution. One is an integer overflow vulnerability that also could lead to code execution. The last is a cross-domain information leak vulnerability.

Users can get the current Flash version from the Flash Player Download Center. You can determine your current Flash version at this Web page.

Android users should get Flash updates through their service provider. Windows and Mac users of AIR can get player updates at the AIR Download Center.

Android AIR users can download a new client on Google Play or at the Amazon Appstore for Android. Determining the current AIR version on your system can be tricky. See this page for instructions.

The Adobe AIR SDK on Windows and Mac also is affected. Download a new version at the Adobe AIR Developer Center.

These vulnerabilities are most severe on Windows and Mac machines, but in theory also could be exploited on mobile platforms.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for InformationWeek Newsletters
White Papers
Current Issue
Top IT Trends to Watch in Financial Services
IT pros at banks, investment houses, insurance companies, and other financial services organizations are focused on a range of issues, from peer-to-peer lending to cybersecurity to performance, agility, and compliance. It all matters.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on InformationWeek.com for the week of July 24, 2016. We'll be talking with the InformationWeek.com editors and correspondents who brought you the top stories of the week to get the "story behind the story."
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.