Become a MacRumors Supporter for $25/year with no ads, private forums, and more!

Adobe Releases Another Emergency Update for Flash

MacRumors

macrumors bot
Original poster
Apr 12, 2001
50,441
11,827



Adobe today released a second security update for its Adobe Flash Player software on both Mac and Windows, addressing a threat that could allow an attacker to take control of an affected system, executing malicious code. The vulnerability (CVE-2014-0502) allowed attackers to compromise at least three nonprofit organizations according to security firm FireEye (via ArsTechnica).
This threat actor clearly seeks out and compromises websites of organizations related to international security policy, defense topics, and other non-profit sociocultural issues. The actor either maintains persistence on these sites for extended periods of time or is able to re-compromise them periodically.

This actor also has early access to a number of zero-day exploits, including Flash and Java, and deploys a variety of malware families on compromised systems. Based on these and other observations, we conclude that this actor has the tradecraft abilities and resources to remain a credible threat in at least the mid-term.
Today's update follows a critical security update that was released just over two weeks ago, fixing the same zero-day vulnerability giving hackers complete control over compromised systems.

The vulnerability affects all Macs with Adobe Flash Player versions before 12.0.0.70 and Adobe recommends all users update their products to the latest of Flash. Adobe maintains a site where users can check the version of Flash installed and the up-to-date Flash software can be downloaded from Adobe's website.

Article Link: Adobe Releases Another Emergency Update for Flash
 

BigBeast

macrumors 6502a
Mar 6, 2009
643
39
A secure platform wouldn't need these emergency updates.

Let me know when you write a program that spans millions of lines of code that you think is completely logically sound. Next, upload it and let thousands of people debug it. Afterward, try to determine where you messed up, and then go through all that code and figure out how to fix the error, followed by the one or more errors created due to the error you fixed. Have fun!
 
Comment

ardchoille50

macrumors 68020
Feb 6, 2014
2,142
1,217
I don't know who controls the macrumors bot, but thank you very much for posting news items.
 
Comment
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.