RSSAdobe fixes major Flash Player vulnerability
By Tim Conneally | Published July 31, 2009, 4:07 PM
On Friday, Adobe issued an out-of-cycle security update to Flash Player, Adobe Reader and Acrobat that fixes several critical cross-platform vulnerabilities, one of which is related to Microsoft's Active Template Library (ATL) vulnerability announced earlier this week.
The software affected in today's update is:
The update for Flash Player fixes, among other things, the problems associated with the compromised version of ATL which could allow remote code execution to take place. Adobe recommends all users of Flash Player 10.0.22.87 and earlier upgrade to 10.0.32.18 or by auto-updating when prompted. If 10.0.32.18 cannot be installed, Adobe has created Flash Player 9.0.246.0 which can be obtained here.
The updates for Reader and Acrobat vary by operating system and version, but Adobe provides links to each respective version in the security bulletin. Because this update came out of cycle for Reader and Acrobat, Adobe has revised its schedule for quarterly security updates so that the next set of patches will arrive on October 13.
This is nice, but when are they going to make it not suck on platforms other than Windows?
Score: 0
|Shortly after they make it not suck on Windows I suppose.
Score: 1
|For the longest time, it was much, much worse on Mac OS/Mac OS X, but as Adobe were working on CS3, Apple had to help them and Flash on Mac OS X is not much worse now.
I wonder if it would have been better as it was originally, part of a small company.
Funny that Microsoft's development products cause other products to be problematic and people still use them.
Score: 0
|