 |
|
 |
| |
| Author |
Message |
kasselbiddy
Age: 41
Joined: 24 May 2012
Posts: 14
|
|
Adobe today issued a surprise update for Flash Player(swf to mov converter for mac) that patched 25 critical vulnerabilities in the ubiquitous media software. The California company urged Windows users to apply the update in the next 72 hours after rating the fix as "Priority 1" in its three-step system. That ranking indicates "vulnerabilities being targeted, or which have a higher risk of being targeted, by exploit(s) in the wild."
Google released an update for the Windows version of Chrome, which includes Flash Player, at 10 a.m. PT. And although Microsoft dated the Internet Explorer 10 (IE10) for Windows 8 update as Oct. 5 on its download website, on Monday a spokeswoman for the Redmond, Wash. developer said that the date was incorrect. Like Google, Microsoft began pushing the IE10 update via Windows Update today at approximately 10 a.m. PT. swf to wmv mac
Background
Microsoft's swift patching of IE10 on Windows 8 today was in contrast to last month, when the company first said it would not fix Flash flaws until late October. After being blasted for its laissez-fair attitude, Microsoft backtracked, saying it would issue an update. It did so on Sept. 21, when a company executive promised closer coordination with Adobe.
"This idea that Adobe would coordinate with Microsoft makes me ask why couldn't they have waited until tomorrow?" Storms asked, noting that Oct. 9 is Microsoft's already-scheduled Patch Tuesday. "There are no exploits in the wild, according to Adobe. But then I got wind of this whole Pwnium thing, so the stars pretty much align."
Under Storms' theory, Adobe felt obliged to ship the Flash update today because Google will kick off a second hacking contest -- dubbed "Pwnium 2" -- in Kuala Lumpur, Malaysia, on Wednesday.
Google security engineers reported 24 of the 25 vulnerabilities to Adobe, most likely to harden Chrome against hackers' attacks at the contest.
When Google announced Pwnium 2 in August, it said it would set aside as much as $2 million in prize money, to be paid out in increments of $60,000, $50,000 and $40,000 to researchers able to exploit bugs in Chrome, in Chrome and other software, or in non-Google code.
The continued abruptness of Flash updates left a sour taste in Storms' mouth. Adobe said that it was not aware of any in-the-wild exploits now leveraging the vulnerabilities patched today.
So far this year, Adobe has issued eight Flash updates: One in February; two in March; one each in May and June; two in August; and one in October.
|
|
|
|
Last edited by kasselbiddy on Sun Dec 15, 2013 11:18 pm; edited 1 time in total
|
|
   |
    |
|
ivy00135
Joined: 06 Nov 2012
Posts: 49808
|
|
| |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum
|
|
|
|
 |
|
 |
|
