Zero-Day Attacks Hitting Flash, Acrobat

[Arch_Angel]

The mainstream 10.0 generation of Flash are vulnerable to an unpatched vulnerability which is being exploited in the wild according to Adobe. The 9.x versions of Adobe Reader and Acrobat which incorporate 10.0 Flash support are also vulnerable. Specifically Flash versions 10.0.45.2 and earlier are affected on Windows, Mac, Linux and Solaris. You can check the version of your Flash client at this web page; note that if you have multiple web browsers they may have different versions of Flash.

The 10.1 generation of Flash, currently in Release Candidate, is not affected by this vulnerability. Users can download the 10.1 beta from Adobe at this link, and this version is also built into current versions of Google's Chrome browser. The 8.x generation of Acrobat is also unaffected.

Read more: http://blogs.pcmag.com/securitywatch...ting_flash.php
Security advisory with a suggested fix posted by Adobe: http://www.adobe.com/support/securit...apsa10-01.html

[ramesh]

Hackers are already exploiting the flaw. "There are reports that this vulnerability is being actively exploited in the wild against Flash Player, Reader and Acrobat," the company said in a security advisory issued around 3:30 p.m. PT Friday.

Danish bug tracker Secunia rated the threat as "extremely critical," the highest ranking in its five-step scoring system. The U.S. Computer Emergency Readiness Team (US-CERT), an arm of the federal Department of Homeland Security, also posted a warning of the vulnerability.

http://www.computerworld.com/s/artic...?taxonomyId=85

[jamrock]

So maybe Steve Jobs has a point.

[Arch_Angel]

Updates for Adobe Reader and Adobe Acrobat was released yesterday.

Follow the links in the following Adobe Security Bulletin.
http://www.adobe.com/support/securit...apsb10-15.html

[lojikal]

Thanks for this valuable piece of info. Will pass it along.