Adobe Flash Player v11.6.602.168 - (Another) Critical Security Update!

[Arthur]

Not even a week after the last one!

 

This update resolves buffer overflow vulnerabilities that could lead to code execution (CVE-2013-1372, CVE-2013-0645, CVE-2013-1373, CVE-2013-1369, CVE-2013-1370, CVE-2013-1366, CVE-2013-1365, CVE-2013-1368, CVE-2013-0642, CVE-2013-1367).

 

This update resolves use-after-free vulnerabilities that could lead to code execution (CVE-2013-0649, CVE-2013-1374, CVE-2013-0644).

 

This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2013-0639).

 

This update resolves memory corruption vulnerabilities that could lead to code execution (CVE-2013-0638, CVE-2013-0647).

 

This update resolves a vulnerability that could result in information disclosure (CVE-2013-0637). (Source)

 

Here are the PUBLIC download links. The release notes will be found here in due course.

 

[b]Internet Explorer[/b]:
http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player_ax.exe

[b]Plug-in based browsers[/b] (Firefox, Opera etc.):
http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player.exe

[b]Uninstaller[/b]
http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe

[b]Standalone Projector[/b]
http://download.macromedia.com/get/flashplayer/updaters/11/flashplayer_11_sa.exe

 

[b]Mac OS X[/b]
http://download.macromedia.com/pub/flashplayer/current/support/install_flash_player_osx.dmg

[b]Android v4.x[/b]
https://play.google.com/store/apps/details?id=com.adobe.flashplayer
http://download.macromedia.com/pub/flashplayer/installers/archive/android/11.1.115.47/install_flash_player_ics.apk

[b]Android v2.x / v3.x[/b]
http://download.macromedia.com/pub/flashplayer/installers/archive/android/11.1.111.43/install_flash_player_ics.apk

[free780]

Next week java http://go.theregister.com/feed/www.theregister.co.uk/2013/02/12/oracle_february_java_fix_redux/

 

Maybe they should alternate?

[Arthur]

Apparently Oracle are putting a lot of effort into fixing Java's numerous security issues, probably due to the fact that the more updates there are, the more people there will be that unwittingly install the Ask toolbar.

 

Maybe they should alternate?

Even better would be nightly builds like you get with some browsers.

Edited February 12, 2013 by Arthur

[free780]

Does the ask toolbar install if you use the msi?

[Arthur]

Does the ask toolbar install if you use the msi?

Only if you update Java via the control panel applet.

 

Oracle are obviously relying on the fact that most home users will update Java this way and just click Next, Next, Next without unchecking the box for the Ask toolbar.