Fix for Critical Adobe Flash Player 10.1 Vulnerability Coming Today
Adobe, the California-based company that specializes in creating multimedia and creativity software products, announced earlier this month that Flash Player 10.1.82.76 and earlier versions for Windows, Macintosh, Linux, Solaris and Flash Player 10.1.92.10 for Android are plagued by a critical vulnerability that, if exploited by a person with malicious intent, could crash the targeted system and potentially allow the attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild.
Adobe planned to release a fix for this Flash Player vulnerability during the week of September 27, 2010. That is no longer the case. Adobe will release a fix for this vulnerability today, the 20th of September.
“We just updated the Security Advisory (APSA10-03) posted on Monday, Sept. 13, 2010 to include an updated schedule for a patch to resolve CVE-2010-2884. Adobe now plans to make available updates for Adobe Flash Player for Windows, Macintosh, UNIX, Solaris and Android on Monday, Sept. 20, 2010,” announced David Lenoe on behalf of the Adobe Product Security Incident Response Team (PSIRT).
As a little side note, the critical vulnerability that plagues Flash Player (CVE-2010-2884) also plagues Adobe Reader 9.3.4 for Windows, Macintosh and UNIX, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh.
As a further side note, earlier this month Adobe announced that Adobe Reader 9.3.4 and earlier versions for Windows, Mac and UNIX, as well as Adobe Acrobat 9.3.4 and earlier versions for Windows and Mac are plagued by a critical vulnerability (CVE-2010-2883) that, if exploited by a person with malicious intent, could allow said person to crash the targeted system and even take control of the targeted system. A security advisory in regards to this vulnerability is available here (APSA10-02).
Adobe said it plans to fix CVE-2010-2884 and CVE-2010-2883 for Adobe Reader and Adobe Acrobat on the week of October 4, 2010.
Adobe planned to release a fix for this Flash Player vulnerability during the week of September 27, 2010. That is no longer the case. Adobe will release a fix for this vulnerability today, the 20th of September.
“We just updated the Security Advisory (APSA10-03) posted on Monday, Sept. 13, 2010 to include an updated schedule for a patch to resolve CVE-2010-2884. Adobe now plans to make available updates for Adobe Flash Player for Windows, Macintosh, UNIX, Solaris and Android on Monday, Sept. 20, 2010,” announced David Lenoe on behalf of the Adobe Product Security Incident Response Team (PSIRT).
As a little side note, the critical vulnerability that plagues Flash Player (CVE-2010-2884) also plagues Adobe Reader 9.3.4 for Windows, Macintosh and UNIX, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh.
As a further side note, earlier this month Adobe announced that Adobe Reader 9.3.4 and earlier versions for Windows, Mac and UNIX, as well as Adobe Acrobat 9.3.4 and earlier versions for Windows and Mac are plagued by a critical vulnerability (CVE-2010-2883) that, if exploited by a person with malicious intent, could allow said person to crash the targeted system and even take control of the targeted system. A security advisory in regards to this vulnerability is available here (APSA10-02).
Adobe said it plans to fix CVE-2010-2884 and CVE-2010-2883 for Adobe Reader and Adobe Acrobat on the week of October 4, 2010.
