Adobe Patches A Dozen Serious Flash Vulnerabilities

Android users at risk to compromise through malicious Flash objects, creating the potential for drive-by attack.

Larry Seltzer, Contributor

November 10, 2011

1 Min Read

Adobe released updated versions of the Flash Player and Air for PCs and Android devices today. In the security advisory describing the update Adobe lists a dozen serious vulnerabilities that are fixed in the new versions.

The affected products are:

  • Adobe Flash Player 11.0.1.152 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems

  • Adobe Flash Player 11.0.1.153 and earlier versions for Android

  • Adobe AIR 3.0 and earlier versions for Windows, Macintosh, and Android

Android users usually have to wait for their carrier to issue an update and obtain it through them will get their updates through the Android Market. Desktop computer users can obtain the latest version of Flash at the Adobe Flash Player Download Center. Never download Flash from any other site but Adobe's; fake versions of the Flash Player are often used to distribute malware.

Adobe recently announced that they would not develop Flash for mobiles anymore. Apart from a market desire for more standards-based technology, regular critical vulnerability fixes have been hard on both Adobe and users.

Adobe's PDF standard includes complete support for embedded Flash objects, so you can expect updates soon for Acrobat and Reader to address these same problems.

Read more about:

20112011

About the Author(s)

Larry Seltzer

Contributor

Follow Larry Seltzer and BYTE on Twitter, Facebook, LinkedIn, and Google+:

Never Miss a Beat: Get a snapshot of the issues affecting the IT industry straight to your inbox.

You May Also Like


More Insights