Adobe Swiftly Patches Critical Zero-Day Flash Bug

[jamescv7]

Hackers are embedding malicious Flash Player files in Microsoft Word documents to launch targeted attacks against select businesses, according to a warning from Adobe.

This latest Flash Player zero-day attack comes just weeks after EMC’s RSA Division was hit with a malware attack that used a rigged Flash (.swf) file embedded in a Microsoft Excel document.

Link

 

[jamescv7]

Adobe moved swiftly to patch the critical zero-day vulnerability in Flash Player with an emergency update five days after it warned users of malicious Word docs exploiting the flaw

As promised, Adobe has patched a zero-day vulnerability in Flash Player that criminals were already exploiting with malicious Word and Excel documents.

The new version with the fixed bug, Flash Player 10.2.159.1, was released for Windows, Mac OS X, Linux and Solaris on April 15. This update was Adobe’s second emergency patch in less than a month.

Link

security advisory CVE-2011-0611