Adobe Flash Zero-Day Attack Underway

Robellus writes "Security researchers have found evidence of a previously unknown Adobe Flash vulnerability being exploited in the wild. The zero-day flaw has been added to the Chinese version of the MPack exploit kit and there are signs that the exploits are being injected into third-party sites to redirect targets to malware-laden servers. From the article: 'Continued investigation reveals this issue is fairly widespread. Malicious code is being injected into other third-party domains (approximately 20,000 web pages) most likely through SQL-injection attacks. The code then redirects users to sites hosting malicious Flash files exploiting this issue.'"

SNAFU

[Anonymous Coward]

Situation Normal, All Flashed Up

Oh... dear... God

[religious freak]

What kind of horrible, horrible update scheme will Adobe come up with to try to combat this?! The thoughts are too terrible to imagine...

Re:SNAFU

[Anonymous Coward]

Their TrueType patenting and PDF hogging weren't too cool either, but wanted to note that Flash is too often abused to flash your computer, in the trench coat variation. Once exposed, it's in the memory. Am sure other Adobe products could be similaryly listed as well. Executives get sucked into telling tech to add Flash to their web pages, because like far too many gamers they like the "oohh, PRETTY" over real substance and worth.

Re:Hmm Windows only... and SQL injection?

[Hal_Porter]

It's Windows only because Microsoft wrote it to promote their Silverlight initiative. Siverlight doesn't work on Macs or Linux, so there's no point porting the exploit there.

Re:Malware-laden

[Opportunist]

Won't anyone here PLEASE think of the servers?

Proverb

[Rastignac]

In France, a popular IT proverb says "Adobe, c'est de la daube". True one more time today...
(won't translate; lost in translation).

Re:And people

[NoobixCube]

An example of the knowledge of the masses: When I commented to my mother that I spent the day watching flash cartoons, she thought I meant animated porn.

Re:And people

[Spad]

Lucky guess?

Re:And people

[Opportunist]

Umm... there are other cartoons on the net?

Re:Flash perpetual vulnerability

[BollocksToThis]

I personally require none of that dada.

Slow down on the keyboard there, Oedipus.

Re:And people

[NoobixCube]

That's completely beside the point :P

Re:Proverb

[Gandalf]

And here in Holland the proverb goes "Rather than Adobe, a doobie". (True every day...)

Kids these days...

[Digestromath]

Back in my day the only way to animate porn was flip the pages real fast. When technology does all the hard work for you, you lose any sense of personal accomplishment.

Re:And people

[Rojo^]

Now that you mention it, Strongbad is topless far too often....

Re:This is NOT a 'zero day flaw'.....

[Daengbo]

If that's your definition, ('zero day' == ) then it still hasn't been used correctly, since the linked article is already a day old.
and
Given that the phrase 'zero day' is made of two single syllable words ...

OneSmartFellow isn't today.

Re:And people

[Anonymous Coward]

$git init
$git commit -a -m "That was easy."