Adobe Warns of Critical Flash Bug, Already Being Exploited 244
Trailrunner7 writes "On the same day that it plans to release a patch for a critical flaw in Shockwave, Adobe confirmed on Thursday morning that there is a newly discovered bug in Flash that is being actively exploited already in attacks against Reader. The vulnerability affects Flash on all of the relevant platforms, including Android, as well as Reader on Windows and Mac, and won't be patched for nearly two weeks. The new Flash bug came to light early Thursday when a researcher posted information about the problem, as well as a Trojan that is exploiting it and dropping a pair of malicious files on vulnerable PCs. Researcher Mila Parkour tested the bug and posted a screenshot of the malicious files that a Trojan exploiting the vulnerability drops during its infection routine. Adobe has since confirmed the vulnerability and said that it is aware of the attacks against Reader."
Re:of course (Score:3, Funny)
It happens when you open PDF documents and Flash scripts. Duh.
Re:Adobe sucks. (Score:5, Funny)
Isn't Flash supposedly sandboxed? And, what the hell is Flash doing in a PDF viewing utility?
Sandboxed? More like litter boxed.
Re:Why two weeks to fix? (Score:1, Funny)
There's another way to do it, which works right now, and will help protect against any future flash security holes. Type this into a terminal:
apt-get remove flashplugin-nonfree
Sure, help yourself (Score:0, Funny)
this one [tinyurl.com]
Ironic (Score:5, Funny)
Am I the only one who finds it ironic that a web site that warns of a critical bug in the Flash player tries to install the Flash plugin?
(yes, I don't have Flash installed anywhere and so the linked web page demands to install it)
Re:Why two weeks to fix? (Score:5, Funny)
They need to come up with a reliable way to fix this, make absolutely sure it actually fixes the problem, and then make sure the patch doesn't cause crashes on any of the OS variants out there. Otherwise the chaos would be worse.
Indeed: just imagine the riots in the streets if they accidentally broke Farmville. Having millions more PCs in botnets will be much less harmful.
Re:Understand Apple a bit better? (Score:3, Funny)
Apple does the things it does because Jobs isn't afraid of shit. It's not like other companies don't hate Adobe as well, but only Steve-o would be willing to drop his pants and scream "Suck my diiiiiick!" at Adobe.
And good on him. I don't think the web as a whole is ready to move off Adobe products, but Apple has a history of driving those sorts of migrations (floppy whats?) and advertisers and websites can't afford to ignore millions of iPhone/iPad owners, who are, by definition, possessed of more money than sense.
The exploit wouldn't work on the iPhone (Score:0, Funny)
It is a well known fact that Apple devices are rendered immune to viruses by the power of Smug. Have you ever seen an Apple with a virus? Apple fanboys sure haven't, and they know it! After all, wWho needs Norton Antivirus when Smug comes free with every Apple device?
Re:"Square" (10.2.x) plugins vulnerable, too, or n (Score:3, Funny)
Many cultures ritualistically mutilate infants' genitals, as well. That doesn't make it right.