WEB AND GRAPHICS software house Adobe is warning its users of a vulnerability that crosses over its Flash Player, Adobe Reader and Acrobat software.
The firm released a security warning at the end of last week, saying that there is a 'critical vulnerability' that is affecting Flash and urging its users to keep the application in a fire bucket by their back door.
According to its security pages, the problem, which is rated as critical, appears in Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems.
As well as affecting Flash, the problem also affects the authplay.dll component which ships with Adobe Reader and Acrobat 9.x for Windows, Macintosh and UNIX operating systems, Adobe said.
Adobe warned that there were reports that the vulnerability was already being exploited, but added that the Flash Player 10.1 Release Candidate does not appear to be vulnerable, so common sense suggests that an upgrade may be due.
Adobe Reader and Acrobat 8.x are also confirmed as not vulnerable and might be worth downgrading to, but users of other versions are told that deleting, renaming, or removing access to the authplay.dll file within Adobe Reader and Acrobat 9.x can mitigate some of the issues affecting those versions.
Adobe has not released a patch yet, but has promised that one will be made available as soon as possible. So in the meantime, keep applying the sticking plasters. µ
When I first heard about this announcement, I thought about the IT staff and where their minds are. I remember working on the support desk year and years ago when a Cisco announcement came out and the fire drill it was to upgrade hardware.
I wrote about it more today and the new technology that helps IT understand which devices are impacted in just seconds.
http://links.maas360.com/adobeFlaw
How 'convenient' that the versions without the new DRM and the unstable GPU acceleration have this security flaw.
As noted by comments above. Besides wasting time.
As the title says, html5 does not replace flash. If some people would bother to read what areas it can replace where flash has been used as a stopgap, there would be alot less flash bashing. Flash will still be the only choice for what it's intended purpose is for a long time coming.
Safari and Firefox are malware vectors, even with HTML5. But let's bash flash and IE as though they were the only vectors out there.
http://news.cnet.com/8301-27080_3-20006502-245.html
...not to start a flame-troll-all-out-war, but didn't someone at Apple mention they weren't too fond of Flash ?
...So go on surfing without fear fellow Apple-fanbois, no chance Flash will harm you !
I guess the iPad users are smiling at this.
I dropped Safari on my Macbook Pro after reading some security reviews about it. Firefox was my choice and Flashblock is a nice little plug-in that I installed mainly to stop the resource hogging advertisement platform (Flash) from running automatically.
And hardly anyone knows about all the spying. And It's not stored on your computer(no way to block it)it's stored on there servers. And it;s does not matter if you use windows mac or linux. If you install it to watch a video it does the same spying and dropping of third party cookies in all system. There are apps to block but if you block third party cookies most videos won't work and you will be annoyed to death. I hope the new replacement is better and can't soon enough for me.
It will always be a security/privacy concern due to it's extremely suspicious cookie system, that runs parallel to the ordinary cookies, where it gathers data about our web navigation, bypassing any security measures taken by the web browsers, operating systems, antiviruses, firewalls, etc.
In other words Adobe call tell if you have been seeing pr0n even if you always switch to your browser's private mode and use an anonymizer proxy.
...well, time to move on to HTML5.