Email this article   Print article 


Adobe Patches Flash Player Security Vulnerabilities

By Marcia Savage
March 12, 2013    2:58 PM ET

Adobe on Tuesday released security updates for Flash Player to repair flaws the company said could potentially allow an attacker to take over an infected system.

Adobe said it is not aware of any exploits or attacks in the wild targeting the four Flash Player security vulnerabilities.

"These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system," Adobe's Product Security Incident Response Team said in a blog post announcing the Flash Player security updates.

[Related: Adobe Confirms Serious PDF Attack Bypassing Reader Protections]

The updates affect Flash Player 11.6.602.171 and earlier versions for Windows and Macintosh, Flash Player 11.2.202.273 and earlier versions for Linux, Flash Player 11.1.115.47 and earlier versions for Android 4.x, and Flash Player 11.1.111.43, and earlier versions for Android 3.x and 2.x.

Tuesday's patches come less than one month after Adobe released an update to fix two Flash Player flaws actively targeted in the wild. Adobe said attackers were trying to exploit the coding errors by tricking users into visiting malicious web pages.

Earlier in February, Adobe released two updates for Flash Player in less than a week. One of the updates repaired 17 Flash Player vulnerabilities.

Criminals have been targeting the ubiquitous Flash Player browser component, often using automated attack tool kits designed to help build malicious websites that exploit vulnerabilities in the software to infect unsuspecting visitors with malware, security experts have said.

Apple recently announced that it is now blocking use of outdated Flash Player plug-ins in its Safari browser in an attempt to quash attacks targeting older versions of the software.

PUBLISHED MARCH 12, 2013

To continue reading this article, please download the free CRN Tech News app for your iPad or Windows 8 device.
Related: Videos | Slide Shows | Comments

SHARE THIS ARTICLE

More Security

Recent Articles

Head-To-Head: Symantec Vs. McAfee In Endpoint Protection

McAfee and Symantec are archrivals with a firm grip on the North American security market. CRN pits both vendors' endpoint security products against each other and names a winner.

The 8 Steps Behind The Massive $45M Cyber Bank Heist

More than $45 million was stolen from banks in the U.S. and 19 other countries in a scheme that law enforcement is calling an international conspiracy to drain millions from bank accounts using stolen debit cards and PIN numbers. Here's how they did it.

Name Of The Game: Top 10 States For Identity Theft

A Federal Trade Commission report provides statistics on identity theft and fraud complaints in 2012. Learn which state has the dubious distinction of having the most victims.

  More Slide Shows




Related Videos
Loading...