Adobe patches 27 critical Flash Player vulnerabilities

By

Multiple flaws allow remote code execution.

Adobe has issued patches for a large number of vulnerabilities in its Flash Player, many of which could allow attackers to remotely take full control of systems running the software.

Adobe patches 27 critical Flash Player vulnerabilities

In its latest security advisory, Adobe said the patches handle an integer underflow vulnerability, several use-after-free flaws as well as memory corruption issues. 

All the above allow for remote code execution.

Three further vulnerabilites in Flash Player can be exploited for information theft, and are patched with the latest updates.

The Flash Player desktop runtime 22.0.0.211 and earlier for Microsoft Windows and Apple OS X / macOS are vulnerable, as are Google's ChomeOS and the same version shipped with Microsoft's Edge and Internet Explorer 11 web browsers in Windows 8.1 and 10.

Adobe's extended support release of Flash Player version 18.0.0.366 and earlier is also vulnerable, along with version 11.2.202.632 for Linux, the company said.

The updated versions of Flash Player are:

  • 23.0.0.162 - Microsoft Windows and Apple macOS / OS X.
  • 18.0.0.375 - Extended support release for Windows and macOS / OS X.
  • 23.0.0.162 - Built-in Flash Player for Google Chrome and Microsoft Edge / Internet Explorer 11.
  • 11.2.202.635 - Linux version of Flash Player.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Log In

  |  Forgot your password?