Slew of dangerous Adobe Flash flaws patched

iTnews (AUS) ^ | Mar 11 2016 | Juha Saarinen

[Utilizer]

Adobe has issued patches for 21 serious flaws in its Flash Player software to address critical vulnerabilities that could potentially allow attackers to take control of victims' systems.

The vulnerabilities affect versions of Flash for Microsoft Windows, Apple OS X and iOS, Linux and Google's ChromeOS operating systems, Adobe said.

Of the vulnerabilities, three allow arbitrary code execution through integer overflows, and 11 involve use-after-free flaws.

Researchers from Google's Project Zero, HP Enterprise Zero Day Initiative, NSFOCUS, Microsoft, Kaspersky, Tencent and Venustech also discovered a heap underflow vulnerability in Adobe Flash and eight memory corruption bugs - all of which allow attackers to run code remotely.

Microsoft rates the vulnerabilities as critical, affecting 32 and 64 bit versions of Windows 8.1, Windows RT 8.1, and Windows 10.

[Utilizer]

Yet more Flash software woes... It appears all users affected in every OS out there.

[E. Pluribus Unum]

Does this mean we get to update Flash every fifteen minutes now?

[w1andsodidwe]

I always wonder how many of these are caused by H1B Visa holders. Cheap labor. You get what you pay for.

[Utilizer]

Not yet. It’s not quite the Win10 level yet. ;)

[Utilizer]

Apple level, on the other hand... *ducks!* *grin*

[Utilizer]

For whoever has the latest ping lists...

[Vendome]

Flash is the biggest POS on the Internet.

Abraham Lincoln warned about its multitudinous flaws on April 15, 1865

[Little Pig]

I wish to hell Adobe Flash would die its well-deserved and long-overdue death already.

[Utilizer]

I dunno. Uncounted numbers of vendors use Point Of Sale software on a daily basis with relatively few errors reported.

[Vendome]

Those are Marxist tools, for the proletariat....

[Faith65]

bkmk

[50mm]

I’ve been Flash-free for 3 months and haven’t missed it at all. I’m glad I uninstalled it on all machines.

[InterceptPoint]

I wish I had the lifetime employment that comes with the job of Lead Adobe Flash Security Administrator. You are paid well. You are always busy. The job is expected to last well into the next century. Perfect.

[867V309]

I’ve been Flash-free for 3 months and haven’t missed it at all. I’m glad I uninstalled it on all machines.

Now install NoScript and you're home free!

[50mm]

I’ve had Noscript for years.

[867V309]

I’ve had Noscript for years.

Excellent. Most flash won't play without javascript.

I also recommend a modified hosts file and Ghostery.

[50mm]

Got Ghostery and Adblock too.

[867V309]

Got Ghostery and Adblock too.

Then you're just not doing your part to support the internet....   ;)

[50mm]

I use whitelisting for conservative sites and full block on libtard sites.

[867V309]

I use whitelisting for conservative sites and full block on libtard sites.

But if you blacklist DU, you can't go there and smell the angst.