Adobe releases unscheduled Flash update to patch critical zero-day threat

[Chiefcrowe]

http://arstechnica.com/security/201...lash-update-to-patch-critical-zero-day-threat

from the article:

"The security flaw exists in Adobe Flash Player 12.0.0.43 and earlier versions for Windows and OS X and 11.2.202.335 and earlier versions for Linux, according to an advisory published Tuesday morning. The vulnerability stems from an integer underflow bug in the underlying code that could be exploited to execute arbitrary code on the affected system. Because attackers can typically trigger such vulnerabilities surreptitiously after luring victims to websites hosting attacks, Adobe rated the threat as "critical," the company's highest severity category."

 

[JEDIYoda]

so what exactly is the issue?

 

[PliotronX]

so what exactly is the issue?

That Flash is as prevalent as Java and both are as secure as swiss cheese.

 

[bruceb]

Chief, Thanks for the update. It would help if you or Adobe provided links to full offline installers. When we go to Adobe for the files, they want us to use an installer which most of us do not want to do .. Thanks

 

[manko]

Chief, Thanks for the update. It would help if you or Adobe provided links to full offline installers.

Just bookmark this page on the Adobe site which is always updated with the latest clean installer links:

Adobe Flash Player Distribution

 

[bruceb]

Manko, Thanks for that link. Adobe has a nasty habit of hiding the full installers for an easy download.