Adobe to Patch Hacking Team’s Flash Zero-Day (Yet another Flash player flaw)

Krebs on Security ^ | 07/07/2015 | Brian Krebs

[Drago]

Adobe Systems Inc. says its plans to issue a patch on Wednesday to fix a zero-day vulnerability in its Flash Player software that is reportedly being exploited in active attacks.

[Drago]

Yet another Flash Player attack/flaw. Most patched software in history?!? See also: http://www.engadget.com/2015/07/08/hacking-team-zero-day-flash-exploit/?ncid=rss_truncated I am looking to drop Flash from my systems all together...Krebs tried it for a month: https://krebsonsecurity.com/2015/06/a-month-without-adobe-flash-player/

[Drago]

Clickable links from above:

http://www.engadget.com/2015/07/08/hacking-team-zero-day-flash-exploit/?ncid=rss_truncated

and

https://krebsonsecurity.com/2015/06/a-month-without-adobe-flash-player/

[RickGee]

I uninstalled Flash (outside of what is built into Google’s Chrome) around January of this year. I got tired of all the updates on two hard drives, plus having to download or update the Chrome browser.

This is on a Macintosh. When I am browsing using the Safari or Firefox browser and hit a Flash link, more and more sites will see that I don’t have Flash installed and provide the same information via HTML. If they don’t do that, there is an error and if I still want to see the content, I paste the link into Google Chrome.

Why don’t I use Chrome all the time? Because Google has the reputation of building up a profile of all your activities, i.e. spying on you. I’m not comfortable with that and I have various ad-suppressing and anti-tracking add-ons in all browsers.

I’ve had no urge to re-install Flash.

[RayChuang88]

I know that Google supposedly fixed the problem by pushing out Flash 18.0.0.203 late yesterday for Chrome users. I wonder has Adobe made 18.0.0.203 available for the Flash plugins used in Internet Explorer and Firefox?

[Drago]

Thanks for the info...I am on a Mac also. I am “tech support” for my late 70’s mother w/a Windows PC...I see a LogMeIn/TeamViewer session for Flash repair in my near future!

[Drago]

I just got .203 for a Windows PC w/IE and my Mac/Safari earlier this morning.

[Drago]

https://get.adobe.com/flashplayer/otherversions/

[Excellence]

Pinging for your input.

[garyb]

Adobe must look at this as yet another chance to sell us McAfee Anti Virus software.

[Excellence]

Is there no other product available that will do the same thing?

[dayglored]

I'm just SO tired of crap from Adobe.

This one looks serious, too. Thanks for the ping.

[dayglored]

Yet Another Adobe Flash Zero-Day Vulnerability ... PING!

You can find all the Windows Ping list threads with FR search: search on keyword "windowspinglist".

Thanks to Excellence for the ping!!

[GOPJ]

Thanks

[Swordmaker]

FLASH has done it again. . . another Zero-Day vulnerability and fix. . . do they ever run out? Probably not. PING!

Adobe Flash vulnerability AGAIN!
Just say NO to FLASH!
Ping!

If you want on or off the Mac Ping List, Freepmail me.

[KoRn]

Probably an exploitable flaw in the recent update they pushed out. Flash seemed to be less exploitable when it was under Macromedia. I could be wrong.

[TChad]

Yet Another Adobe Flash Zero-Day Vulnerability

Adobe should change its name to Security-Holes-R-Us.

It's their business model. Gotta scare users into logging onto the Adobe website to download the latest Flash/Reader/etc. in the hope that users won't remember to uncheck the "INSTALL SOME GARBAGE SOFTWARE THAT PAYS OUR BILLS" check box.

But I use Flash every day, so I play the game.

Download the latest version of Flash for Windows here:
https://get.adobe.com/flashplayer/

Check your installed version here:
http://www.adobe.com/software/flash/about/

If you want to stop Flash from running automatically when a page is loaded, you may be able to change your browser plugin settings for Flash to "Ask to Activate" instead of "Always Activate." It's more secure, and web pages with lots of Flash content are less annoying.

[KGeorge]

Every time I get one of those deals that says I have to “upgrade” my Flash player in order to watch a video, I just blow it off.

I really, really hate Flash- especially when vendors have it. Wastes my time. (loading…loading…loading…oh, TH with it)

[TChad]

Wastes my time.

Yes, but nothing like getting infected with a modern virus will waste your time.

If you hate futzing with Flash, and it's a non-business computer, you can set Flash to auto-update.

If you want to reduce the page loading time, depending on your browser you may be able to set Flash (in your browser add-ons) to start only on demand. That way you can play only the Flash content you want.

[rarestia]

If you think that by selective use of Chrome you’re not being tracked, you’re a fool. Once installed, Chrome has so many hooks into your system that even if you think you aren’t using it, it’s running on your system.

In the Windows world, Chrome is installed not only as an application but as a browser hijack for IE as well. Anything you do in Windows that requires an Internet connection to an external address is cataloged in your local profile in Windows, just waiting to be uploaded to Google.

[Varmint Al]

If you use FireFox, there are many alternates to using Adobe Flash. Here is a short list.

Good Hunting... from Varmint Al