Update Flash, Shockwave ASAP! Adobe also patches Acrobat and Reader

Update Flash, Shockwave ASAP! Adobe also patches Acrobat and Reader

Summary: (Correction:) Surprise updates to Adobe Flash Player and Shockwave Plaer address critical vulnerabilities at high risk of exploit. Less urgent, but still serious updates for Adobe Acrobat and Reader are also available.

SHARE:
TOPICS: Security
12

Adobe today released security updates for Flash Player, AIRShockwave PlayerAcrobat and Reader. The updates for Flash Player and Shockwave Player on Windows and Mac address a vulnerability which Adobe classifies as Priority 1, which indicates that it is being exploited in the wild at a high risk of exploit.

The updated versions of Flash Player on Windows and Mac are 11.8.800.168 and 11.7.700.242. Earlier 11.7 and 11.8 versions are vulnerable. Updates are also available for Flash Player on Linux and Android, as well as Adobe AIR and the Adobe AIR SDK. These are not as severe and updating is not as high a priority.

The updates for Reader and Acrobat are classified as less urgent. They are important vulnerabilities, but not being exploited.

The affected versions of Flash and AIR are:

  • Adobe Flash Player 11.8.800.94 and earlier versions for Windows and Macintosh
  • Adobe Flash Player 11.2.202.297 and earlier versions for Linux
  • Adobe Flash Player 11.1.115.69 and earlier versions for Android 4.x
  • Adobe Flash Player 11.1.111.64 and earlier versions for Android 3.x and 2.x
  • Adobe AIR 3.8.0.870 and earlier versions for Windows and Android
  • Adobe AIR 3.8.0.910 and earlier versions for Macintosh
  • Adobe AIR 3.8.0.870 SDK & Compiler and earlier versions for Windows
  • Adobe AIR 3.8.0.910 SDK & Compiler and earlier versions for Macintosh

The affected versions of Adobe Reader and Acrobat are:

  • Adobe Reader and Acrobat X (10.1.7) and earlier versions for Windows and Macintosh
  • Adobe Reader and Acrobat XI (11.0.03) and earlier versions for Windows and Macintosh

Users can update to the latest version of Adobe Flash Player at http://get.adobe.com/flashplayer. Users can update Adobe Reader and Acrobat from the Help menu ("Check for Updates...")

(Correction: An earlier version of this story stated that the Flash and Shockwave updates were being exploited in the wild. They are not; they are at a high risk of exploit.)

Topic: Security

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

12 comments
Log in or register to join the discussion
  • Dear Microsoft....

    ..you still think integrating Flash Player in IE was a good idea?
    daftkey
    • On Flash Player IE integration...

      >..you still think integrating Flash Player in IE was a good idea?
      Well, the integration means that Flash Player in IE is patched as part of Windows Update instead of a separate updater.
      yuhong2
    • Yes

      Because it means everyone has it and it gets updated.
      Michael Alan Goff
  • Anything that has to be patched this often...

    Anything that has to be patched this often and this urgently should simply be done away with.
    mlashinsky@...
    • So what software should be left?

      What software doesn't get patched as much as flash? Even Chrome does.
      Michael Alan Goff
  • Patches

    As always I am an Hour(s) late and a dollar short cause I read the whole article - late start today - RETIRED and loving it!!! Hummmm- patches - - Looks like MS - Adobe and all others are criticized and/or condemned if the don't patch - AND - also - when they do!!!!! IE is bad - IE is good! Chrome is better! No it is not, Foxfire is better!! Win8 sucks - No it's great!!! No start button - Don't need start button!! This stuff can lead a body to drink!!!!! BOTTOMS UP!!! (and have a great confusing day!!)
    puppadave
  • Why is Flash still used?

    I don't understand it, I am constantly having problems with Flash and Shockwave, from freezing Firefox to the blue screen. Updated FF 2 weeks ago and it got even worse. The internet seemingly doesn't mind that a lot of it is dependent on these bug-infested programs. Why?
    quipage
    • "The Internet" has no mind.

      Besides, the 'net isn't dependent on _any_ of these programs, only some websites are.
      Papa_Bill
    • Cross-platform

      And it doesn't depend on you having a specific browser.

      Also, if you're having constant flash problems... maybe yo need to update it. I'm getting none over here.
      Michael Alan Goff
  • we don't need no stinking Adobe

    But I've already uninstalled all Adobe products. Anytime one product line has more problems than the entire Microsoft catalog, it should die.
    mswift@...
  • Adobe Flash and Reader

    I had numerous 'hanging (frozen)' screens after starting Chrome which could not cope with its Flash and Shockwave extensions - the last time resulting in damage to my computer taking out SAM file etc., forcing a re-install of XP so I removed them both. However, what alternative can I use for Adobe X1 which I need to read emails, etc.?
    BaliRob
  • Make some money!

    If all you "whiners" out there could write code "any better" than the people out there actually writing code, then you'd be on your way to making "BILLIONS" of dollars!

    So, stop whining and start writing! Billions of dollars are out there waiting for you!!!! I've "yet" to see "ANY" program out there to date that "DOESN'T" need up dates or patches! That includes "everything" from the Linux crowd to the Apple crowd to the Windows crowd to the Chrome crowd!

    "THERE IS NO PROGRAM OUT THERE THAT IS "IRON CLAD", CAN'T BE BROKEN OR HACKED! Period! So if you think you can do better, DO IT and stop whining!!!!!!

    Billions upon billions of dollars are out there waiting for "YOUR" Iron Clad Program to hit the market! Can't do it, then "STOP WHINING"!!!!!!!!!!!!!!!!
    Disgruntled_MS_User