Adobe patches Multiple Security Flaw in Flash Player

Adobe releases patches for critical security flaws which allows attackers to control your system. This bundle applies for Windows, Macintosh, Linux and Chrome OS.

Flash Player Security Update – APSB17-21

These critical vulnerabilities affected Adobe Flash Player Desktop Runtime, Adobe Flash Player for Google Chrome running with versions of 26.0.0.131 and earlier, also Adobe Flash Player for Microsoft Edge and Internet Explorer 11 running version 26.0.0.120 and earlier.

Vulnerability Category Vulnerability Impact Severity CVE Numbers
Security Bypass Information Disclosure Important CVE-2017-3080
Memory Corruption Remote Code Execution Critical CVE-2017-3099
Memory Corruption Memory address disclosure Important CVE-2017-3100

Users are asked to updated Adobe Flash Player Desktop Runtime running on Windows, Macintosh and Linux to version 26.0.0.137.

Also Read Sources to Trace New Vulnerabilities

Adobe Connect Security Update – APSB17-22

Security Update released for Adobe Connect which resolves input validation vulnerabilities (CVE-2017-3102, CVE-2017-3103) that results in reflected and stored cross-site scripting attacks.Also this update includes Mitigation for clickjacking attacks (CVE-2017-3101).

Vulnerability Category Vulnerability Impact Severity CVE Number
User Interface (UI) Misrepresentation of Critical Information Clickjacking attacks Moderate CVE-2017-3101
Improper Neutralization of Input During Web Page Generation Cross-site scripting attacks Important CVE-2017-3102
Improper Neutralization of Input During Web Page Generation Cross-site scripting attacks Important CVE-2017-3103

Affected version 9.6.1 and users are recommended to update with version 9.6.2.

Also Read Multiple Vulnerabilities with Pre-installed Packages open Dell systems to Hack

Leave a Reply