Patch/Configuration Management, Vulnerability Management

Adobe releases out-of-band update for Flash Player

Adobe issued an out-of-band Flash Player update for Windows, Macintosh, and Linux on Thursday that addresses 18 vulnerabilities, including the company's most recent zero-day exploit.

The addressed bugs could allow an attacker to take control of an affected system, Adobe wrote in its post on the release.

The most recent zero-day exploit, CVE-2015-0313, was also patched in an earlier auto-update on Wednesday. The bug is actively being exploited in the wild via drive-by-download attacks against systems running Internet Explorer and Firefox on Windows 8.1 and below.

All the bugs, except for those affecting Adobe Flash Player and earlier for Linux, were given a priority rating of “1.”

The software updates resolve use-after-free, memory corruption, type confusion, heap buffer overflow and buffer overflow vulnerabilities, all which could lead to code execution. Null point dereference issues were also addressed.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.