Adobe patches Flash again as Firefox users are under attack
Posted on 27 February 2013.
Adobe is urging users to update their Flash Player for the third time this month, as once again the company is aware of vulnerabilities being exploited in the wild in targeted attacks.

The attackers are trying to trick users into clicking a link which directs to a website serving malicious Flash (SWF) content and, according to the security bulletin released by Adobe, Firefox users are particularly at risk.

The update fixes three vulnerabilities in total (CVE-2013-0504, CVE-2013-0643 and CVE-2013-0648), but currently only the latter two - a Flash Player Firefox sandbox flaw and a vulnerability in the ExternalInterface ActionScript feature - have been spotted being exploited in active attacks.

Users who have set up automatic updating for Flash need only to wait for the updates to be pushed out. The rest are advised to download patched version for Windows, Mac and Linux.

Windows and Mac users and administrators are urged to do so as soon as possible, while those using Linux can do so at their discretion.









Spotlight

Whitepaper: Zero Trust approach to network security

Posted on 20 November 2014.  |  Zero Trust is an alternative security model that addresses the shortcomings of failing perimeter-centric strategies by removing the assumption of trust.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Fri, Nov 21st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //