Adobe Flash Player v11.5.502.149 - Critical Security Update!

[Arthur]

If it isn't Java, it's Flash Player!

 

Adobe issues emergency Flash update for attacks on Windows, Mac users

Adobe Systems has released a patch for two Flash player vulnerabilities that are being actively exploited online to surreptitiously install malware, one in attacks that target users of Apple's Macintosh platform.

 

While Flash versions for OS X and Windows are the only ones reported to be under attack, Thursday's unscheduled release is available for Linux and Android devices as well. Users of all affected operating systems should install the update as soon as possible.

 

The Mac exploits target users of the Safari browser included in Apple's OS X, as well as those using Mozilla's Firefox. That vulnerability, cataloged as CVE-2013-0634, is also being used in exploits that trick Windows users into opening booby-trapped Microsoft Word documents that contain malicious Flash content, Adobe said in an advisory. Adobe credited members of the Shadowserver Foundation, Lockheed Martin's Computer Incident Response Team, and MITRE with discovery of the critical bug.

 

The other bug under attack, CVE-2013-0633, also works by tricking Windows users into opening a Word document containing malicious Flash content. It was discovered by researchers from antivirus provider Kaspersky Lab. (Source)

 

Here are the PUBLIC download links. The release notes can be found here.

 

[b]Internet Explorer[/b]:
http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player_ax.exe

[b]Plug-in based Windows browsers[/b] (Firefox, Opera etc.):
http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player.exe

[b]Uninstaller[/b]
http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe

[b]Standalone Projector[/b]
http://download.macromedia.com/get/flashplayer/updaters/11/flashplayer_11_sa.exe

 

[b]Mac OS X[/b]
http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player_osx.dmg

[b]Android (v11.1.115.37)[/b]
https://play.google.com/store/apps/details?id=com.adobe.flashplayer
http://download.macromedia.com/pub/flashplayer/installers/archive/android/11.1.115.37/install_flash_player_ics.apk

[sparkeh]

For the love of God, I just got the last update out across site >:-o

[Arthur]

FireEye's blog has more details on how the (now patched) Flash Player exploit worked.

 

LadyBoyle comes to town with a new exploit « FireEye

 

http://i.imgur.com/TCsXP17.png