Page 8 of 14 FirstFirst ... 456789101112 ... LastLast
Results 71 to 80 of 139

Thread: Adobe updates/advisories

  1. #71
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 15.0.0.223 released

    FYI...

    Flash 15.0.0.223 released
    - https://helpx.adobe.com/security/pro...apsb14-24.html
    Nov 11, 2014
    CVE number: CVE-2014-0573, CVE-2014-0574, CVE-2014-0576, CVE-2014-0577, CVE-2014-0581, CVE-2014-0582, CVE-2014-0583, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0588, CVE-2014-0589, CVE-2014-0590, CVE-2014-8437, CVE-2014-8438, CVE-2014-8440, CVE-2014-8441, CVE-2014-8442
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. Adobe recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 15.0.0.223.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.252.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.418.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x will be automatically updated to the current version.
    - Users of the Adobe AIR desktop runtime should update to version 15.0.0.356.
    - Users of the Adobe AIR SDK and AIR SDK & Compiler should update to version 15.0.0.356.
    - Users of Adobe AIR for Android should update to Adobe AIR 15.0.0.356...

    For I/E:
    - http://download.macromedia.com/get/f...5_active_x.exe
    For Firefox (Plugin-based browsers):
    - http://download.macromedia.com/get/f..._15_plugin.exe

    Flash test site:
    - http://www.adobe.com/software/flash/about/

    AIR download:
    - http://get.adobe.com/air/
    ___

    - http://www.securitytracker.com/id/1031182
    CVE Reference: CVE-2014-0573, CVE-2014-0574, CVE-2014-0576, CVE-2014-0577, CVE-2014-0581, CVE-2014-0582, CVE-2014-0583, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0588, CVE-2014-0589, CVE-2014-0590, CVE-2014-8437, CVE-2014-8438, CVE-2014-8440, CVE-2014-8441, CVE-2014-8442
    Nov 11 2014
    Impact: Disclosure of authentication information, Execution of arbitrary code via network, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Solution: The vendor has issued a fix (15.0.0.223 for Windows/Mac, ESR 13.0.0.252, 11.2.202.418 for Linux)...

    Last edited by AplusWebMaster; 2014-11-12 at 02:20.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  2. #72
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 15.0.0.239 released

    FYI...

    UPDATE: https://www.f-secure.com/weblog/archives/00002768.html
    Nov 25, 2014 - "... the exploit didn’t match any of the vulnerabilities patched in APSB14-22 (CVE-2014-0558, CVE-2014-0564, or CVE-2014-0569)... Kafeine* reported Angler exploiting this vulnerability... followed by Astrum and Nuclear exploit kits..."
    * http://malware.dontneedcoffee.com/20...2014-0569.html

    Flash 15.0.0.239 released
    - https://helpx.adobe.com/security/pro...apsb14-26.html
    November 25, 2014
    CVE number: https://web.nvd.nist.gov/view/vuln/d...=CVE-2014-8439 - 7.5 (HIGH)
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates provide additional hardening against CVE-2014-8439, which was mitigated in the October 14, 2014 release (reference http://helpx.adobe.com/security/prod...apsb14-22.html).
    - Adobe recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 15.0.0.239.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.258.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.424.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x will be automatically updated to the current version.
    Affected software versions
    - Adobe Flash Player 15.0.0.223 and earlier versions
    - Adobe Flash Player 13.0.0.252 and earlier 13.x versions
    - Adobe Flash Player 11.2.202.418 and earlier versions for Linux
    - To verify the version of Adobe Flash Player installed on your system, access the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe (or Macromedia) Flash Player" from the menu. If you use multiple browsers, perform the check for each browser you have installed on your system.
    Solution: Adobe recommends users update their software installations by following the instructions below:
    - Adobe recommends users of the Adobe Flash Player desktop runtime for Windows and Macintosh update to Adobe Flash Player 15.0.0.239 by visiting the Adobe Flash Player Download Center, or via the update mechanism within the product when prompted.
    - Adobe recommends users of the Adobe Flash Player Extended Support Release should update to version 13.0.0.258 by visiting http://helpx.adobe.com/flash-player/...-versions.html.
    - Adobe recommends users of Adobe Flash Player for Linux update to Adobe Flash Player 11.2.202.424 by visiting the Adobe Flash Player Download Center.
    - Adobe Flash Player installed with Google Chrome will be automatically updated to the latest Google Chrome version, which will include Adobe Flash Player 15.0.0.239 on Windows and 15.0.0.242 on Macintosh.
    - Adobe Flash Player installed with Internet Explorer for Windows 8.x will be automatically updated to the latest version, which will include Adobe Flash Player 15.0.0.239...

    For I/E:
    - http://download.macromedia.com/get/f...5_active_x.exe
    For Firefox (Plugin-based browsers):
    - http://download.macromedia.com/get/f..._15_plugin.exe

    Flash test site:
    - http://www.adobe.com/software/flash/about/
    ___

    - http://www.securitytracker.com/id/1031259
    https://web.nvd.nist.gov/view/vuln/d...=CVE-2014-8439 - 7.5 (HIGH)
    Nov 25 2014
    Impact: Execution of arbitrary code via network, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): prior to 15.0.0.239 ...

    Last edited by AplusWebMaster; 2014-11-27 at 03:36.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  3. #73
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Post Adobe Prenotification Security Advisory for Reader / Acrobat

    FYI...

    Adobe Prenotification Security Advisory for Reader / Acrobat
    - https://helpx.adobe.com/security/pro...apsb14-28.html
    Dec 4, 2014 - "Summary: Adobe is planning to release security updates on Tuesday, December 9, 2014 for Adobe Reader and Acrobat for Windows and Macintosh. Users may monitor the latest information on the Adobe Product Security Incident Response Team (PSIRT) blog at:
    - http://blogs.adobe.com/psirt
    (Note: This Security Advisory will be replaced with the Security Bulletin upon release of the update.)
    Affected software versions
    Adobe Reader XI (11.0.09) and earlier versions
    Adobe Reader X (10.1.12) and earlier versions
    Adobe Acrobat XI (11.0.09) and earlier versions
    Adobe Acrobat X (10.1.12) and earlier versions .

    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  4. #74
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 16.0.0.235, Reader/Acrobat 11.0.10, ColdFusion Hotfixes released

    FYI...

    Flash 16.0.0.235 released
    - https://helpx.adobe.com/security/pro...apsb14-27.html
    Dec 9, 2014
    CVE number: CVE-2014-0580, CVE-2014-0587, CVE-2014-8443, CVE-2014-9162, CVE-2014-9163, CVE-2014-9164
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. Adobe is aware of reports that an exploit for CVE-2014-9163 exists in the wild, and recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 16.0.0.235.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.259.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.425.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to the current version.
    Note: Users who have been updated to version 15.0.0.246 are not affected by CVE-2014-9163.
    Affected software versions:
    Adobe Flash Player 15.0.0.242 and earlier versions
    Adobe Flash Player 13.0.0.258 and earlier 13.x versions
    Adobe Flash Player 11.2.202.424 and earlier versions for Linux
    To verify the version of Adobe Flash Player installed on your system, access the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe (or Macromedia) Flash Player" from the menu. If you use multiple browsers, perform the check for each browser you have installed on your system.
    Solution: Adobe recommends users update their software installations by following the instructions below:
    - Adobe recommends users of the Adobe Flash Player desktop runtime for Windows and Macintosh update to Adobe Flash Player 16.0.0.235 by visiting the Adobe Flash Player Download Center, or via the update mechanism within the product when prompted.
    - Adobe recommends users of the Adobe Flash Player Extended Support Release should update to version 13.0.0.259 by visiting http://helpx.adobe.com/flash-player/...-versions.html.
    - Adobe recommends users of Adobe Flash Player for Linux update to Adobe Flash Player 11.2.202.425 by visiting the Adobe Flash Player Download Center.
    - Adobe Flash Player installed with Google Chrome will be automatically updated to the latest Google Chrome version, which will include Adobe Flash Player 16.0.0.235.
    - Adobe Flash Player installed with Internet Explorer for Windows 8.x will be automatically updated to the latest version, which will include Adobe Flash Player 16.0.0.235...

    For IE:
    - http://download.macromedia.com/get/f...6_active_x.exe
    For Firefox and other Plugin-based browsers:
    - http://download.macromedia.com/get/f..._16_plugin.exe

    Flash test site:
    - http://www.adobe.com/software/flash/about/

    - http://www.securitytracker.com/id/1031316
    CVE Reference: CVE-2014-0580, CVE-2014-0587, CVE-2014-8443, CVE-2014-9162, CVE-2014-9163, CVE-2014-9164
    Dec 9 2014
    Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): 13.0.0.258 and prior 13.x versions; 15.0.0.242 and prior; 11.2.202.424 and prior for Linux...
    Solution: The vendor has issued a fix (16.0.0.235 for Windows/Mac, 13.0.0.259 ESR, 11.2.202.425 for Linux).
    ___

    Adobe Reader/Acrobat 11.0.10 released
    - https://helpx.adobe.com/security/pro...apsb14-28.html
    Dec 9, 2014
    CVE numbers: CVE-2014-9165, CVE-2014-8445, CVE-2014-9150, CVE-2014-8446, CVE-2014-8447, CVE-2014-8448, CVE-2014-8449, CVE-2014-8451, CVE-2014-8452, CVE-2014-8453, CVE-2014-8454, CVE-2014-8455, CVE-2014-8456, CVE-2014-8457, CVE-2014-8458, CVE-2014-8459, CVE-2014-8460, CVE-2014-8461, CVE-2014-9158, CVE-2014-9159
    Platform: Windows and Macintosh
    Summary: Adobe has released security updates for Adobe Reader and Acrobat for Windows and Macintosh. These updates address vulnerabilities that could potentially allow an attacker to take over the affected system. Adobe recommends users update their product installations to the latest versions:
    - Users of Adobe Reader XI (11.0.09) and earlier versions should update to version 11.0.10.
    - Users of Adobe Reader X (10.1.12) and earlier versions should update to version 10.1.13.
    - Users of Adobe Acrobat XI (11.0.09) and earlier versions should update to version 11.0.10.
    - Users of Adobe Acrobat X (10.1.12) and earlier versions should update to version 10.1.13.
    Affected software versions:
    Adobe Reader XI (11.0.09) and earlier 11.x versions
    Adobe Reader X (10.1.12) and earlier 10.x versions
    Adobe Acrobat XI (11.0.09) and earlier 11.x versions
    Adobe Acrobat X (10.1.12) and earlier 10.x versions
    Solution: Adobe recommends users update their software installations by following the instructions below:
    Adobe Reader: The product's default update mechanism is set to run automatic update checks on a regular schedule. Update checks can be manually activated by choosing Help > Check for Updates.
    Adobe Reader users on Windows can find the appropriate update here:
    - http://www.adobe.com/support/downloa...atform=Windows
    Adobe Reader users on Macintosh can find the appropriate update here:
    - http://www.adobe.com/support/downloa...form=Macintosh
    Adobe Acrobat: The product's default update mechanism is set to run automatic update checks on a regular schedule. Update checks can be manually activated by choosing Help > Check for Updates.
    Acrobat Standard and Pro users on Windows can find the appropriate update here:
    - http://www.adobe.com/support/downloa...atform=Windows
    Acrobat Pro users on Macintosh can find the appropriate update here:
    - http://www.adobe.com/support/downloa...form=Macintosh

    - http://www.securitytracker.com/id/1031322
    CVE Reference: CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8448, CVE-2014-8449, CVE-2014-8451, CVE-2014-8452, CVE-2014-8453, CVE-2014-9150, CVE-2014-9165
    Dec 9 2014
    Impact: Disclosure of system information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via local system, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): 10.1.12 and prior 10.x; 11.0.09 and prior 11.x ..
    Solution: The vendor has issued a fix (10.1.13, 11.0.10).
    ___

    ColdFusion Hotfixes available
    - https://helpx.adobe.com/security/pro...apsb14-29.html
    Dec 9, 2014
    CVE numbers: CVE-2014-9166
    Platform: All
    Summary: Adobe has released security hotfixes for ColdFusion versions 11 and 10. These hotfixes address a resource consumption issue that could potentially result in a denial of service. ColdFusion 9.x versions are not affected by this issue.
    Affected software versions: ColdFusion 11 and 10
    Solution: Adobe recommends ColdFusion customers update their installation using the instructions provided in the relevant technote:
    - ColdFusion 11: http://helpx.adobe.com/coldfusion/kb...-update-3.html
    - ColdFusion 10: http://helpx.adobe.com/coldfusion/kb...update-15.html
    Customers should also apply the security configuration settings as outlined on the ColdFusion Security page as well as review the ColdFusion 11 Lockdown Guide and ColdFusion 10 Lockdown Guide.
    ... These hotfixes address a resource consumption issue that could potentially result in a denial of service (CVE-2014-9166)...

    - http://www.securitytracker.com/id/1031321
    CVE Reference: CVE-2014-9166
    Dec 9 2014
    Impact: Denial of service via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): 10, 11
    Description: A vulnerability was reported in Adobe ColdFusion. A remote user can cause denial of service conditions.
    Solution: The vendor has issued a fix (10 Update 15, 11 Update 3).

    Last edited by AplusWebMaster; 2014-12-10 at 19:22.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  5. #75
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 16.0.0.257 released

    FYI..

    Flash 16.0.0.257 released
    - https://helpx.adobe.com/security/pro...apsb15-01.html
    Jan 13, 2015
    CVE number: CVE-2015-0301, CVE-2015-0302, CVE-2015-0303, CVE-2015-0304, CVE-2015-0305, CVE-2015-0306, CVE-2015-0307, CVE-2015-0308, CVE-2015-0309
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. Adobe recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 16.0.0.257.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.260.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.429.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to version 16.0.0.257.
    - Users of the Adobe AIR desktop runtime should update to version 16.0.0.245.
    - Users of the Adobe AIR SDK and AIR SDK and Compiler should update to version 16.0.0.272.
    - Users of Adobe AIR for Android should update to version 16.0.0.272...

    For IE:
    - http://download.macromedia.com/get/f...6_active_x.exe
    For Firefox and other Plugin-based browsers:
    - http://download.macromedia.com/get/f..._16_plugin.exe

    Flash test site: http://www.adobe.com/software/flash/about/

    AIR download:
    - http://get.adobe.com/air/

    NOTE: IF you are running Malwarebytes Anti-Exploit, at the moment there seems to be a conflict with this Flash download that needs resolution w/MBAE or vice-versa - until it is resolved, you may need to temporarily disable MBAE during the Flash download until it is.
    ___

    - http://www.securitytracker.com/id/1031525
    CVE Reference: CVE-2015-0301, CVE-2015-0302, CVE-2015-0303, CVE-2015-0304, CVE-2015-0305, CVE-2015-0306, CVE-2015-0307, CVE-2015-0308, CVE-2015-0309
    Jan 13 2015
    Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
    Fix Available: Yes Vendor Confirmed: Yes ...
    Solution: The vendor has issued a fix (16.0.0.257 for Windows and Mac, ESR 13.0.0.260, 11.2.202.429 for Linux)...

    Last edited by AplusWebMaster; 2015-01-13 at 23:35.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  6. #76
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 16.0.0.287 released

    FYI...

    Flash 16.0.0.287 released
    - https://helpx.adobe.com/security/pro...apsb15-02.html
    Jan 22, 2015
    CVE number: https://web.nvd.nist.gov/view/vuln/d...=CVE-2015-0310
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address a vulnerability that could be used to circumvent memory randomization mitigations on the Windows platform. Adobe is aware of reports that an exploit for CVE-2015-0310 exists in the wild, which is being used in attacks against older versions of Flash Player. Additionally, we are investigating reports that a -separate- exploit for Flash Player 16.0.0.287 and earlier also exists in the wild. For the latest information, please refer to the PSIRT blog here*.
    * http://blogs.adobe.com/psirt/
    Adobe recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 16.0.0.287.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.262.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.438.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to version 16.0.0.287.
    Affected software versions
    - Adobe Flash Player 16.0.0.257 and earlier versions
    - Adobe Flash Player 13.0.0.260 and earlier 13.x versions
    - Adobe Flash Player 11.2.202.429 and earlier versions for Linux
    Solution: Adobe recommends users update their software installations by following the instructions below:
    - Adobe recommends users of the Adobe Flash Player desktop runtime for Windows and Macintosh update to Adobe Flash Player 16.0.0.287 by visiting the Adobe Flash Player Download Center, or via the update mechanism within the product when prompted.
    - Adobe recommends users of the Adobe Flash Player Extended Support Release should update to version 13.0.0.262 by visiting:
    > http://helpx.adobe.com/flash-player/...-versions.html.
    - Adobe recommends users of Adobe Flash Player for Linux update to Adobe Flash Player 11.2.202.438 by visiting the Adobe Flash Player Download Center.
    - Adobe Flash Player installed with Google Chrome will be automatically updated to the latest Google Chrome version, which will include Adobe Flash Player 16.0.0.287.
    - Adobe Flash Player installed with Internet Explorer for Windows 8.x will be automatically updated to the latest version, which will include Adobe Flash Player 16.0.0.287.

    For IE:
    - http://download.macromedia.com/get/f...6_active_x.exe
    For Firefox and other Plugin-based browsers:
    - http://download.macromedia.com/get/f..._16_plugin.exe

    Flash test site: http://www.adobe.com/software/flash/about/

    - https://helpx.adobe.com/security/pro...apsa15-01.html
    Updated: Jan 22, 2015 - "... We are aware of reports that this vulnerability is being actively exploited in the wild via drive-by-download attacks against systems running Internet Explorer and Firefox on Windows 8 and below. Adobe expects to have a patch available for CVE-2015-0311 during the week of January 26..."
    ___

    - http://www.securitytracker.com/id/1031609
    CVE Reference: https://cve.mitre.org/cgi-bin/cvenam...=CVE-2015-0310
    Jan 22 2015
    Impact: Disclosure of system information
    Fix Available: Yes Vendor Confirmed: Yes
    This vulnerability is being actively exploited...
    Version(s): 16.0.0.257 and prior; 13.0.0.260 and prior 13.x versions ...
    Solution: The vendor has issued a fix (16.0.0.287, ESR 13.0.0.262)...

    Last edited by AplusWebMaster; 2015-01-24 at 15:33.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  7. #77
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 16.0.0.296 available

    FYI...

    Flash 16.0.0.296 available
    - https://helpx.adobe.com/security/pro...apsa15-01.html
    Updated: Jan 24, 2015
    Users who have enabled auto-update for the Flash Player desktop runtime will be receiving version 16.0.0.296 beginning on January 24. This version includes a fix for CVE-2015-0311. Adobe expects to have an update available for manual download during the week of January 26, and we are working with our distribution partners to make the update available in Google Chrome and Internet Explorer 10 and 11...
    Revisions
    January 24, 2015: Updated to include Flash Player version delivered via auto-update.
    January 24, 2015: Updated to reflect reports that Windows 8.1 is also affected by CVE-2015-0311.
    - https://web.nvd.nist.gov/view/vuln/d...=CVE-2015-0311 - 10.0 (HIGH)
    Last revised: 01/26/2015 - "Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015."

    >> https://www.adobe.com/products/flash...ribution3.html

    For IE:
    - http://download.macromedia.com/get/f...6_active_x.exe
    For Firefox and other Plugin-based browsers:
    - http://download.macromedia.com/get/f..._16_plugin.exe

    Flash test site: http://www.adobe.com/software/flash/about/

    - https://isc.sans.edu/forums/diary/St...m+Adobe/19229/
    Last Updated: 2015-01-25 02:58:36 UTC See 'Comments'...
    ___

    - https://www.us-cert.gov/ncas/current...e-Flash-Player
    Jan 26, 2015
    > https://web.nvd.nist.gov/view/vuln/d...=CVE-2015-0311 - 10.0 (HIGH)

    Last edited by AplusWebMaster; 2015-01-27 at 18:04.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  8. #78
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 16.0.0.296 ...

    FYI...

    Flash 16.0.0.296 ...
    - https://helpx.adobe.com/security/pro...apsb15-03.html
    Jan 27, 2015
    CVE numbers:
    - https://web.nvd.nist.gov/view/vuln/d...=CVE-2015-0311 - 10.0 (HIGH)
    - https://web.nvd.nist.gov/view/vuln/d...=CVE-2015-0312 - 10.0 (HIGH)
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. Adobe is aware of reports that CVE-2015-0311 is actively being exploited in the wild via drive-by-download attacks against systems running Internet Explorer and Firefox on Windows 8.1 and below. Adobe recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 16.0.0.296.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.264.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.440.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to version 16.0.0.296.

    >> https://www.adobe.com/products/flash...ribution3.html

    For IE:
    - http://download.macromedia.com/get/f...6_active_x.exe
    For Firefox and other Plugin-based browsers:
    - http://download.macromedia.com/get/f..._16_plugin.exe

    Flash test site: http://www.adobe.com/software/flash/about/

    - https://isc.sans.edu/diary.html?storyid=19249
    Last Updated: 2015-01-28 20:23:05 UTC - "... Given that we are seeing exploits in the wild, the criticality of this exploit should be re-evaluated for prioritization and implementation..."
    ___

    - http://www.securitytracker.com/id/1031634
    CVE Reference: https://web.nvd.nist.gov/view/vuln/d...=CVE-2015-0312 - 10.0 (HIGH)
    Jan 27 2015

    Last edited by AplusWebMaster; 2015-01-30 at 07:57.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  9. #79
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 16.0.0.305 ...

    FYI...

    Flash 16.0.0.305 ...
    - https://helpx.adobe.com/security/pro...apsa15-02.html
    Last updated: Feb 4, 2015 - updated to include Flash Player version delivered via auto-update.
    CVE number: https://web.nvd.nist.gov/view/vuln/d...=CVE-2015-0313 - 10.0 (HIGH)
    UPDATE (February 4): Users who have enabled auto-update for the Flash Player desktop runtime will be receiving version 16.0.0.305 beginning on February 4. This version includes a fix for CVE-2015-0313. Adobe expects to have an update available for manual download on February -5- and we are working with our distribution partners to make the update available in Google Chrome and Internet Explorer 10 and 11. For more information on updating Flash Player please refer to this post*.
    * https://forums.adobe.com/thread/1152367
    ___

    - https://helpx.adobe.com/security/pro...apsb15-04.html
    Feb 5, 2015
    CVE number: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323, CVE-2015-0324, CVE-2015-0325, CVE-2015-0326, CVE-2015-0327, CVE-2015-0328, CVE-2015-0329, CVE-2015-0330
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. Adobe is aware of reports that CVE-2015-0313 is actively being exploited in the wild via drive-by-download attacks against systems running Internet Explorer and Firefox on Windows 8.1 and below. Adobe recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 16.0.0.305.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.269.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.442.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to version 16.0.0.305...
    Solution: Adobe recommends users update their software installations by following the instructions below:
    - Adobe recommends users of the Adobe Flash Player desktop runtime for Windows and Macintosh update to Adobe Flash Player 16.0.0.305 by visiting the Adobe Flash Player Download Center, or via the update mechanism within the product when prompted.
    - Adobe recommends users of the Adobe Flash Player Extended Support Release should update to version 13.0.0.269 by visiting http://helpx.adobe.com/flash-player/...-versions.html.
    - Adobe recommends users of Adobe Flash Player for Linux update to Adobe Flash Player 11.2.202.442 by visiting the Adobe Flash Player Download Center.
    - Adobe Flash Player installed with Google Chrome will be automatically updated to the latest Google Chrome version, which will include Adobe Flash Player 16.0.0.305.
    - Adobe Flash Player installed with Internet Explorer for Windows 8.x will be automatically updated to the latest version, which will include Adobe Flash Player 16.0.0.305...
    Revisions: Feb 19, 2015: Added reference to CVE-2015-0331, which was resolved in 16.0.0.305, 13.0.0.269 and 11.2.202.442 but inadvertently omitted from the bulletin.

    For IE:
    - http://download.macromedia.com/get/f...6_active_x.exe
    For Firefox and other Plugin-based browsers:
    - http://download.macromedia.com/get/f..._16_plugin.exe

    Flash test site: http://www.adobe.com/software/flash/about/
    __

    - http://atlas.arbor.net/briefs/index#-1434008395
    Feb 05, 2015 20:35 - "... a malvertising-directed compromise campaign involving the Angler exploit kit distributing the exploit code from approximately 1800 -malicious- sub-domains...
    As of February 5 2015, the CVE-2015-0311 has been incorporated into another exploit kit known as Sweet Orange [ https://twitter.com/kafeine/status/5...826048/photo/1 ]. Organizations should ensure that robust patching and hardening tactics are used in order to prevent exploitation from commodity exploit kits as well as targeted attacks.
    "
    ___

    - http://www.securitytracker.com/id/1031706
    CVE Reference: CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323, CVE-2015-0324, CVE-2015-0325, CVE-2015-0326, CVE-2015-0327, CVE-2015-0328, CVE-2015-0329, CVE-2015-0330
    Feb 5 2015
    Impact: Execution of arbitrary code via network, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): 16.0.0.296 and prior (Windows/Mac); 13.0.0.264 and prior 13.x; 11.2.202.440 and prior (Linux)...
    Solution: The vendor has issued a fix (16.0.0.305, ESR 13.0.0.269, 11.2.202.442 for Linux).
    The vendor's advisory is available at:
    - https://helpx.adobe.com/security/pro...apsb15-04.html

    Last edited by AplusWebMaster; 2015-03-10 at 22:07.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

  10. #80
    Adviser Team AplusWebMaster's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    6,881

    Exclamation Flash 17.0.0.134 ...

    FYI...

    Flash 17.0.0.134 ...
    - https://helpx.adobe.com/security/pro...apsb15-05.html
    Mar 12, 2015
    CVE number: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342
    Platform: All Platforms
    Summary: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. Adobe recommends users update their product installations to the latest versions:
    - Users of the Adobe Flash Player desktop runtime for Windows and Macintosh should update to Adobe Flash Player 17.0.0.134.
    - Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.277.
    - Users of Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.451.
    - Adobe Flash Player installed with Google Chrome, as well as Internet Explorer on Windows 8.x, will automatically update to version 17.0.0.134...

    For IE:
    - http://download.macromedia.com/get/f...7_active_x.exe
    For Firefox and other Plugin-based browsers:
    - http://download.macromedia.com/get/f..._17_plugin.exe

    Flash test site: http://www.adobe.com/software/flash/about/
    ___

    - http://www.securitytracker.com/id/1031922
    CVE Reference: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342
    Mar 13 2015
    Impact: Disclosure of user information, Execution of arbitrary code via network, Modification of user information, User access via network
    Fix Available: Yes Vendor Confirmed: Yes
    Version(s): 16.0.0.305 and prior...
    Solution: The vendor has issued a fix (17.0.0.134, ESR 13.0.0.277, 11.2.202.451 for Linux).

    Last edited by AplusWebMaster; 2015-03-13 at 13:59.
    The machine has no brain.
    ......... Use your own.
    Browser check for updates here.
    YOU need to defend against -all- vulnerabilities.
    Hacks only need to find -1- to get in...
    .

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •