Adobe Flash Player 11.2.202.235 Security Update

Adobe has released Adobe Flash Player 11.2.202.235 to address an object confusion vulnerability (CVE-2012-0779) that could cause the application to crash and potentially allow an attacker to take control of the affected system. There are reports that the vulnerability is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious file delivered in an email message. The exploit targets Adobe Flash Player on Internet Explorer for Windows only.

Affected version:
  • Adobe Flash Player 11.2.202.233 and earlier versions for Windows, Macintosh and Linux operating systems
  • Adobe Flash Player 11.1.115.7 and earlier versions for Android 4.x, and Adobe Flash Player 11.1.111.8 and earlier versions for Android 3.x and 2.x

Solution:
Adobe recommends users of Adobe Flash Player 11.2.202.233 and earlier versions for Windows, Macintosh and Linux update to Adobe Flash Player 11.2.202.235. Adobe Flash Player installed with Google Chrome was updated automatically, so no user action is required. Users of Adobe Flash Player 11.1.115.7 and earlier versions on Android 4.x devices should update to Adobe Flash Player 11.1.115.8. Users of Adobe Flash Player 11.1.111.8 and earlier versions for Android 3.x and earlier versions should update to Adobe Flash Player 11.1.111.9.

Download Adobe Flash Player 11.2.202.235 (May 8, 2012)
The following downloads provide the Adobe Flash Player 11.2.202.235 installers for Windows operating systems. Download the files appropriate for you.

Users of Adobe Flash Player 11.1.115.7 and earlier versions on Android 4.x devices should update to Adobe Flash Player 11.1.115.8 by browsing to Google Play on an Android device. Users of Adobe Flash Player 11.1.111.8 and earlier versions for Android 3.x and earlier versions should update to Adobe Flash Player 11.1.111.9 by browsing to Google Play on an Android device.

For details on system requirements, please visit the Adobe Flash Player 11.2 System requirements web page.


What's new in Adobe Flash Player 11.2.202.235
Fixed Issues:
  • Resolves an object confusion vulnerability (CVE-2012-0779)

Source:

No comments: