Adobe on Wednesday made available a new version of Flash Player 9 to correct six vulnerabilities that could allow attackers to bypass security controls and take control of a user's machine.
The fixes -- made in version 9.0.151.0 -- address flaws that could lead to a variety of hacker attacks, including cross-site scripting, DNS rebinding and HTML injection, according to an Adobe bulletin.
Adobe, however, is encouraging users to upgrade to Flash Player 10, released Oct. 15 and not affected by any of the latest vulnerabilities.
In addition, Adobe on Thursday pushed out a hot fix for a bug in ColdFusion, a server and software language used to develop applications, similar to ASP.NET or PHP.
This is the second major Adobe update of the week. On Monday, the company delivered a new version of Adobe Reader and Acrobat 8 to square off a number of critical vulnerabilities that could allow an attacker to take remote control of an infected computer.
See original article on scmagazineus.com
Adobe patches older version of Flash for six flaws
By
Dan Kaplan
on
Nov 7, 2008 9:54AM
Adobe has pushed out a new version of Flash Player 9 to shore up six vulnerabilities.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Top 5 Benefits of Managed IT Services
Promoted Content
Alienated from your own data? You’re not alone
Promoted Content
Security "mindset shift" needed to protect organisations
Promoted Content
Don't miss Australia’s premiere IoT Conference on 9th June
Sponsored Whitepapers
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
Don’t pay the ransom: A three-step guide to ransomware protection
