Adobe plugs holes in Flash Player and ColdFusion

By

Four vulnerabilities plugged.

On Tuesday, Adobe patched four vulnerabilities affecting its popular Flash Player software and ColdFusion web application server.


Security updates for Flash Player addressed two critical vulnerabilities that could cause the software to crash and potentially allow a saboteur to take control of an exploited system, Adobe revealed in a bulletin.

In addition, a “hotfix” rectifying two flaws in ColdFusion was released, plugging a cross-site scripting (XSS) vulnerability that could be exploited by a remote authenticated attacker, and another bug that could give an unauthorized user remote read access.

The ColdFusion update impacts versions 9 and newer running on Windows, Macintosh and Linux. Adobe Flash Player 11.9.900.117 and earlier versions for Windows and Macintosh received updates, as well as Adobe Flash Player 11.2.202.310 and earlier versions for Linux.

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Victoria's Secret pulls down website amid security incident

Victoria's Secret pulls down website amid security incident

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Log In

  |  Forgot your password?