Critical Flash Player Update Fixes 2 Zero-Days

JMH · Feb 7, 2013

Adobe today pushed out an emergency update that fixes at least two zero-day vulnerabilities in its ubiquitous Flash Player software — flaws that attackers are already exploiting to break into systems. Interestingly, Adobe warns that one of the exploits in use is designed to drop malware on both Windows and Mac OS X systems.

Adobe said in an advisory that one of the vulnerabilities — CVE-2013-0634 - is being exploited in the wild in attacks delivered via malicious Flash content hosted on websites that target Flash Player in Firefox or Safari on the Macintosh platform, as well as attacks designed to trick Windows users into opening a Microsoft Word document delivered as an email attachment.

Critical Flash Player Update Fixes 2 Zero-Days ? Krebs on Security

Search

Search

Critical Flash Player Update Fixes 2 Zero-Days

JMH

Emeritus, Contributor