Adobe acknowledges critical remote vulnerability in Flash, exploits already in the wild

“Adobe on Saturday released an updated version of its Flash player software that patches an undisclosed vulnerability which could allow remote attackers to take control of Macs or PCs, urging users to update as the problem is being actively exploited by malicious actors,” AppleInsider reports.

“Flash versions up to and including 16.0.0.287 on OS X and Windows and 11.2.202.438 on Linux are susceptible to the attack, the cause of which has yet to be detailed,” AppleInsider reports. “Mac users with Adobe’s automatic update feature enabled should begin receiving updates to version 16.0.0.296 immediately, and the company is preparing a standalone patch for manual installation to be released this week.”

AppleInsider reports, “The vulnerability — which has been assigned CVE number 2015-0311 — is ‘being actively exploited in the wild via drive-by-download attacks against systems running Internet Explorer and Firefox on Windows 8.1 and below,’ Adobe said in a security advisory.”

More info and links in the full article here.

MacDailyNews Take: Adobe Flash is a toxic waste dump.

[Thanks to MacDailyNews Reader “Lynn Weiler” for the heads up.]

14 Comments

    1. Recoding it???? You are just so funny. Steve forbid it on all flash devices.

      And, sadly, new macs will shut it down if it’s not up to snuff.

      A Flash free world would be so nice. As Steve said…. Adobe was the largest cause of Mac crashes.

      🙁

  1. Please, why hasn’t Flash died? I’ve already had to contaminate my 5K iMac just because I want to update my TomTom. It shouldn’t be necessary, just stick a fork in it.

  2. Here’s a quick list of important facts related to this latest barrage of Flash exploits:

    1) The current version of Flash Plug-in installed must be v16.0.0.296. Anything earlier is being exploited right now. Update.

    2) Here’s where you can check what version you have and update as necessary:

    System Preferences…/Flash Player/Advanced/Updates

    Click the ‘Check Now’ button. If you need the update, the process will start. After the update the ‘NPAPIP Plug-in version’ will say ‘16.0.0.296’.

    If you don’t have the ‘Flash Player’ preference pane, then you either have an ancient old version of Flash or you haven’t got it installed, good for you.

    I’ve written up a collection of ways to protect ourselves from the dangerous crapware known as Flash here:

    http://mac-security.blogspot.com/2015/01/critical-adobe-flash-zero-day-exploit.html

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.