Adobe plugs holes in Flash Player and ColdFusion

By

Four vulnerabilities plugged.

On Tuesday, Adobe patched four vulnerabilities affecting its popular Flash Player software and ColdFusion web application server.


Security updates for Flash Player addressed two critical vulnerabilities that could cause the software to crash and potentially allow a saboteur to take control of an exploited system, Adobe revealed in a bulletin.

In addition, a “hotfix” rectifying two flaws in ColdFusion was released, plugging a cross-site scripting (XSS) vulnerability that could be exploited by a remote authenticated attacker, and another bug that could give an unauthorized user remote read access.

The ColdFusion update impacts versions 9 and newer running on Windows, Macintosh and Linux. Adobe Flash Player 11.9.900.117 and earlier versions for Windows and Macintosh received updates, as well as Adobe Flash Player 11.2.202.310 and earlier versions for Linux.

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

International Criminal Court hit by cyber attack

International Criminal Court hit by cyber attack

Log In

  |  Forgot your password?