Patch/Configuration Management, Vulnerability Management

Adobe plugs holes in Flash Player and ColdFusion

On Tuesday, Adobe patched four vulnerabilities affecting its popular Flash Player software and ColdFusion web application server.

Security updates for Flash Player addressed two critical vulnerabilities that could cause the software to crash and potentially allow a saboteur to take control of an exploited system, Adobe revealed in a bulletin.

In addition, a “hotfix” rectifying two flaws in ColdFusion was released, plugging a cross-site scripting (XSS) vulnerability that could be exploited by a remote authenticated attacker, and another bug that could give an unauthorized user remote read access.

The ColdFusion update impacts versions 9 and newer running on Windows, Macintosh and Linux. Adobe Flash Player 11.9.900.117 and earlier versions for Windows and Macintosh received updates, as well as Adobe Flash Player 11.2.202.310 and earlier versions for Linux.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.