Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > News > Mac News > Another critical Flash flaw identified, Adobe fix not until next week

Another critical Flash flaw identified, Adobe fix not until next week
Thread Tools
NewsPoster
MacNN Staff
Join Date: Jul 2012
Status: Offline
Reply With Quote
Oct 15, 2015, 12:42 PM
 
A critical vulnerability has been identified in Adobe Flash Player by security researchers at Trend Micro. All versions for Windows, Macintosh and Linux of the problematic plugin, including this week's release, are all affected by the vulnerability. Targets of the attack can have the flaw exploited to induce a system crash and potentially allow an attacker to take control of the affected computer.

Adobe is aware of a report that an exploit for this vulnerability, labeled CVE-2015-7645, is being used in limited, targeted attacks. The company provided few details of the information it has. A fix isn't expected immediately -- Adobe expects to make an update available during the week of October 19.   

The flaw, identified by Trend Micro, is being used in the "Pawn Storm" attacks against embassies and governments. The researchers report that one victim "got its DNS settings for incoming mail compromised." Users are advised to uninstall Flash until the flaw is fixed.
     
Mr. Strat
Dedicated MacNNer
Join Date: Jan 2002
Location: State of WA
Status: Offline
Reply With Quote
Oct 15, 2015, 01:24 PM
 
Enough already! Can we please put the nail in the coffin of this pathetic technology?
     
I'mDaMac
Senior User
Join Date: Jan 2001
Location: Southern CA
Status: Offline
Reply With Quote
Oct 15, 2015, 01:49 PM
 
I don't have Flash installed on my iMac. I did install Chrome for those instances when Flash is needed but I find myself using it less as time goes by.
Who'sDaMac?
     
Makosuke
Dedicated MacNNer
Join Date: Aug 2001
Location: California
Status: Offline
Reply With Quote
Oct 15, 2015, 01:49 PM
 
No! A zero-day Flash exploit? What is the world coming to?

...the 15th of the month. Because if it's the 15th of the month, Adobe is probably announcing yet another zero-day Flash exploit. Or three. Like clockwork.

How someone could even manage to write software that buggy is beyond me.
     
climacs
Senior User
Join Date: Sep 2001
Location: in front of my computer
Status: Offline
Reply With Quote
Oct 15, 2015, 02:07 PM
 
the easiest (and most common) IT article in the world to write: "Critical Flash flaw identified"
     
   
 
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Top
Privacy Policy
All times are GMT -4. The time now is 02:22 AM.
All contents of these forums © 1995-2017 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.8 © 2000-2017, Jelsoft Enterprises Ltd.,