Adobe: Attacks on Flash Player Flaw
Summary: Adobe warned that attackers are exploiting a previously unknown critical flaw in all supported versions of Flash Player, and that the same vulnerability exists in Adobe Reader and Acrobat, though no attacks on those programs had been seen yet. The exploit arrives via Flash (.swf) files embedded in a Microsoft Excel document delivered as an email attachment, and Adobe said a fix should be available during the week of March 21.
Why it matters: The attack bypasses the usual filters because a spreadsheet with an embedded Flash object is odd enough that few controls expect it, and Adobe is holding the Reader X fix until its scheduled June 14, 2011 quarterly update rather than shipping an out-of-cycle patch.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026