New Flash Player vulnerabilities

[LabZero]

The spread of data stolen in HackingTeam allowed to bring out two more security vulnerabilities in Adobe Flash that allow an attacker to take control of target computers simply by visiting a link (one of the favorite techniques of HackingTeam).

These two new flaws have not for now a corrective update!

Adobe is racing to create and deploy the update to correct these vulnerabilities, but meanwhile, cybercriminals are already using at least one of them, so it is highly recommended that you uninstall, disable or block Flash to run automatically. Among other things, probably will not feel the lack; Indeed, you'll notice that many sites will load faster because Flash content (usually advertisements) are not read.

The Flash flaws are labeled CVE-2015-5122 and -5123 and are present in versions of Windows, Linux and OS X Adobe plug-in. Adobe has said that these new flaws will be corrected next week. Until then, use more caution than usual, even on good reputation because many attacks come from Flash advertising, which are not handled by the same sites but are submitted by ad networks, that are targeted by cybercriminals.

Update 2015.07.13

Regards Klipsh

 

[frogboy]

Another day and another vulnerability not much new here.

 

[Koroke San]

I have sandboxie with flashblock so no worry

 

[Cch123]

*Cough cough While everyone is so focused on the Adobe flash exploits, let's not forget about the far more dangerous and as of yet unpatched Windows Kernel exploit inside the files.

 

[Cats-4_Owners-2]

After falling gloriously to sleep before the sun set, it is now the middle of the night here & I am wide awake & alerted to Windows
vulnerabilities. Although I happen to be typing from linux (at the moment) I've still activated <click> to play for Chrome. Check.
Now, @Cch123's mention of 'Windows un-patched kernel exploit' shall have to wait until daylight clears the mountains to the east. Thanks to delicious pizza,,and the fine folks on MT, it is now time to dream for at least 2 more hours!

 

[FireShootSK]

Come on webmaster. Let s kill Flash. It s annoying and boring. HTML5 is future!

 

[jamescv7]

You may use Flash player with your control, those patches are been fixed immediately + you have a very minimal chance to infect if you are just going to the same sites to play video.

Based on my observation alongside of investigation cause novice + advance users are never been infected of unpatched Flash Player.

 

[LabZero]

2015.07.15

Update (16:55): The Flash Player 18.0.0.209 version is downloadable from this page.