Adobe races to patch zero-day vulnerability in Flash Player

Filed Under: Adobe, Adobe Flash, Podcast, Vulnerability

Adobe holes
Adobe has issued a security advisory about an as-yet unpatched vulnerability in its popular Flash Player software, affecting users of Windows, Mac, Linux, Solaris and even Google Android.

The critical security hole could allow an attacker to take control of your computer and run malicious code.

The firm also confirmed that the vulnerability also affects Adobe Reader 9.3.4 for Windows, Mac and UNIX, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Mac. The reason that Acrobat and Reader are also affected is because the programs support Flash content inside PDF files

The new warnings follow closely after news last week of another vulnerability in Reader and Acrobat that was being exploited by malware authors.

Adobe has announced that an update for Flash Player tackling the latest vulnerability is expected to be available during the week of September 27, and an update for Acrobat and Reader will be available the following week.

Last month, Sophos blogger Chet Wisniewski interviewed Brad Arkin, Adobe's Senior Director of Product Security and Privacy, about the firm's security strategy and their upcoming sandboxing technology.


You can also download the interview directly in MP3 format.

Malicious hackers are clearly examining Adobe's products intently, hunting for security holes which they can abuse. The wide adoption of Adobe's software by millions of users around the world has become something of a double-edged sword for the company - while they're been enormously successful, they've also ended up in the firing line for cybercriminals wanting to exploit their widely-used code.

, ,

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <strike> <strong>

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.