AppleInsider Staff
In a security advisory published on Thursday, Adobe announced the immediate availability of a patch covering two newly discovered Flash vulnerabilities that are being exploited "in the wild."
The two bugs, one affecting Apple's Mac platform and another attacking Microsoft's Windows, exploit certain Flash player vulnerabilities to install malware onto users' systems, reports ArsTechnica. While users of other operating systems like Linux have yet to report attacks, Adobe's advisory notes the exploit affects all platforms.
Designated as CVE-2013-0634, the first vulnerability targets the Safari and Firefox Web browsers running on OS X, and is also being used as a trojan to deploy Microsoft Word documents containing malware. For Mac users, the flaw affects Adobe Flash Player version 11.5.502.146 or earlier.
From Adobe's release:
Adobe is also aware of reports that CVE-2013-0634 is being exploited in the wild in attacks delivered via malicious Flash (SWF) content hosted on websites that target Flash Player in Firefox or Safari on the Macintosh platform, as well as attacks designed to trick Windows users into opening a Microsoft Word document delivered as an email attachment which contains malicious Flash (SWF) content.The second bug, cataloged as CVE-2013-0633, only affects Windows machines and uses a similar Microsoft Word document trojan to execute attacks.
Oliver Haslam
Andrew O'Hara
Charles Martin
Wesley Hilliard
Marko Zivkovic
Malcolm Owen
Andrew Orr
11 Comments
uhh - thanks Adobe, I guess.
Why not do the world a favour and just send it the way of GoLive, Freehand ...
Send a clear message to all the flash coderz - it's dead, no longer supported.
Sent from my iPad
Removed Flash from my Mac more than two years ago. No more crashes, freezes.. etc. No problems.
heh, my kids would kill me !
I said it in 2009. Flash is dead. Please just kill it already Adobe.
If YouTube released a Mac app like they did for the iPad a lot less people would need Flash. They can't just use the HTML5 player because it doesn't support DRM but with their own app they could do whatever their copyright sensitive clients required.