Adobe has released an emergency update that resolves 3 critical security vulnerabilities, including the one that was discovered by TrendMicro this week. All three of these vulnerabilities could allow an attacker to create a specially crafted web page that exploits the security holes in order to remotely execute code on the victims machine. This would allow the attacker to download files, execute commands, and have full control of the victim's computer.
This update was supposed to be released on October 19th, but as the vulnerabilities were actively being used to distribute malware or perform other attacks, Adobe pushed it out quicker. It is strongly suggested that anyone who uses Adobe Flash upgrade to the latest versions listed in the below table.
| Product | Updated Versions | Platform |
|---|---|---|
| Adobe Flash Player Desktop Runtime | 19.0.0.226 | Windows and Macintosh |
| Adobe Flash Player Extended Support Release | 18.0.0.255 | Windows and Macintosh |
| Adobe Flash Player for Google Chrome | 19.0.0.226 | Windows, Macintosh and Linux |
| Adobe Flash Player for Google Chrome | 19.0.0.225 | Chrome OS |
| Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 19.0.0.226 | Windows 10 |
| Adobe Flash Player for Internet Explorer 10 and 11 | 19.0.0.226 | Windows 8.0 and 8.1 |
| Adobe Flash Player for Linux | 11.2.202.540 | Linux |
Comments
softeyes - 8 years ago
I you do not want McAfee, untick that option, or it will install.
Lawrence, thank you.
greysmouth - 8 years ago
Done! Many thanks!