Adobe ships Flash Player update, ColdFusion hotfix

Adobe on Tuesday issued updates to its popular Flash Player to close out six vulnerabilities listed as "critical."

The flaws could be exploited by an attacker to crash the multimedia application or take control of a user's system, according to a bulletin. Adobe encouraged users to upgrade their Flash Player to version 10.1.82.76, and users of AIR, a cross-operating system runtime environment used to build internet applications, should update to version 2.0.3.

For users unable to upgrade the latest version of Flash, Adobe released a patched version, 9.0.280.

In addition on Tuesday, Adobe released updated versions of its Flash Media Server to plug four vulnerabilities. Also, the company issued a hotfix for an "important" vulnerability in ColdFusion 9.0.1 and earlier versions running on Windows, Macintosh and UNIX. ColdFusion is an application server that allows developers to rapidly build, deploy and maintain enterprise web applications.

Next week, Adobe is scheduled to release out-of-band updates for its Reader and Acrobat products.

Tuesday's releases coincided with Microsoft's monthly security update.

More in News

Privacy-bolstering "Apps Act" introduced in House

The bill would provide consumers nationwide with similar protections already enforced by a California law.

Microsoft readies permanent fix for Internet Explorer bug used in energy attacks

Microsoft is prepping a whopper of a security update that will close 33 vulnerabilities, likely including an Internet Explorer (IE) flaw that has been used in targeted website attacks against the U.S. government.

Weakness in Adobe ColdFusion allowed court hackers access to 160K SSNs

Up to 160,000 Social Security numbers and one million driver's license numbers may have been accessed by intruders.