
The Adobe corporation are in the headlines yet again, must be embarrassing now!
Adobe confirmed that the software pioneers were well informed of “potential vulnerabilities” influencing Adobe Reader, Acrobat 9.1.2 and Adobe Flash Player 9 as well as 10. Thus, advising users to make sure their systems are completely secure since hackers are still lurking in the midst.
However, latest reports have suggested that these “vulnerabilities” were substantially clear to many of the public using Adobe Flash Player a whole seven months ago. What do you have to say for yourself Adobe? The first instance where the issue in Flash Player was identified in late December last year and noted in Adobe’s “credible” bug and issue management system.
Recognition must go to Purwire’s valued researcher Paul Royal, who has been working at the internet security service provider since January 2009.
Zdnet reported earlier that this so called flaw was a “data loss corruption” but Adobe’s ’strong’ response team were completely misleaded this time which lead to their public humiliation. However, their reaction to this has been positive hence announcing patches shall be attainable on the 31st July for Linux, Mac and Windows users.
Adobe said in their security advisory that the bug can cause problems for users and so they should remove the authplay.dll file which comes with Adobe Reader,
“A critical vulnerability exists in the current versions of Flash Player (v9.0.159.0 and v10.0.22.87) for Windows, Macintosh and Linux operating systems, and the authplay.dll component that ships with Adobe Reader and Acrobat v9.x for Windows. This vulnerability (CVE-2009-1862) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild via limited, targeted attacks against Adobe Reader v9 on Windows.”
Have you suffered any problems with Adobe Flash Player? What have you done? Has it been successful? Feel free to comment below.
1 Comment