Another Out-of-Band Critical Security Update for Adobe Flash Player & AIR

[Corrine]

Adobe has released Version 18.0.0.203 of Adobe Flash Player for Windows and Macintosh and Version 18.0.0.180 of Adobe AIR. Version information for Linux and the Extended Release is available below.

This update addresses critical vulnerabilities that could potentially allow an attacker to take control of the affected system. Because an exploit targeting CVE-2015-5119 has been published publicly, updating to the latest version as soon as possible is advised.

Direct download links for Windows 7 and below:

Non-IE Plugin (Opera, Firefox, Etc.): http://download.macromedia.com/get/...ensing/win/install_flash_player_18_plugin.exe
Flash Player For Internet Explorer, Windows 7 and earlier: http://download.macromedia.com/get/...sing/win/install_flash_player_18_active_x.exe

• Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 18.0.0.203. The current version of Adobe AIR is 18.0.0.180.
• Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.302.
• Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.481.
• Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to the current version.
• The latest version of Adobe AIR for Android is 18.0.0.180 and earlier versions, available by downloading it from the Android Marketplace by browsing to it on a mobile phone.

Security Bulletin

 

[Aura]

That hack didn't only put Hacking Team at risk in the future, but every web users as well.