Forest Global Training Partners

Cyber Risks · Krebs on Security

Adobe Update Nixes Flash Player Zero Day

Summary: Adobe shipped an emergency Flash Player update to fix a critical flaw, CVE-2014-0515, that is being exploited in active attacks, bringing the player to v. 13.0.0.206 on Windows and Mac and v. 11.2.202.356 on Linux. Kaspersky Lab reported the vulnerability and detailed two exploits used in watering-hole espionage attacks against Windows users, marking the second Flash zero-day patch in as many months.

What's compelling: This is the second Flash zero-day Adobe has patched in two months, and the exploits were already live in watering-hole attacks on legitimate websites before a fix existed - so any delay in applying the update leaves users exposed to attacks that were running in the wild.

Read the original at Krebs on Security ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2014-0515
Related