Flash 0day [Now Patched]

[HammerStone]

Kind of a PSA I suppose, but if you run Adobe Flash (Player), please make sure you visit http://get.adobe.com/flashplayerand upgrade to the latest version. A 0day vulnerability was discovered due to some other events, and Adobe released a patch for it the other day. Consequences may include losing control of your computer, so just go do it. ;)

 

[HammerStone]

There is a second exploit, currently unpatched. Firefox has started blocking Flash by default; you must manually enable it.

 

[Doug_E_Fresh]

there's also 2 for java. One allows privilege escalation in windows and has a microsoft patch. KB3077657 is for Microsoft if you're interested.

 

[liafailrock]

My firefox still gives a warning each time I try to use flash despite updates-- not that I want to use it anyway. I've disabled it long time ago on this laptop and tower computer upstairs. As a matter of fact, the tower was getting so old harware-wise it would not even run flash any longer. Lately, I've been using HTML5 on youtube and even the clunky computer runs it choppy, but watchable. Also disabling flash gets rid of half those annoying ads. This is a mission to end flash once and for all. Steve Jobs was right.

 

[liafailrock]

I take that back. There was an update for my system today, but I guess it took a week which is unusual. No more warnings, but I still don't really use flash much.

 

[nhaas]

Who still uses Flash and Java? Interesting if you still do.

 

[Doug_E_Fresh]

A lot of people. For a lot of things. Myself included. Most business related sites won't run without java or flash