Flash Player 11.5.502.135 Available for Download

Adobe has been released Flash Player 11.5.502.135 for Windows, Flash Player 11.5.502.136 for Mac, Flash Player 11.2.202.258 for Linux, Flash Player 11.1.115.34 for Android 4.x and Flash Player 11.1.111.29 for Android 3.x. These security updates address three critical-risk vulnerabilities that could cause the application to crash and potentially allow an attacker to take control of the affected system.

Adobe recommends users update their product installations to the latest versions:
  • Users of Adobe Flash Player 11.5.502.110 and earlier versions for Windows should update to Adobe Flash Player 11.5.502.135.
  • Users of Adobe Flash Player 11.5.502.110 and earlier versions for Macintosh should update to Adobe Flash Player 11.5.502.136.
  • Users of Adobe Flash Player 11.2.202.251 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.258.
  • Flash Player installed with Google Chrome will automatically be updated to Google Chrome 23.0.1271.97 Stable, which will include Adobe Flash Player 11.5.31.5.
  • Flash Player installed with Internet Explorer 10 for Windows 8 will automatically be updated to the latest Internet Explorer 10 version, which will include Adobe Flash Player 11.3.377.15.
  • Users of Adobe Flash Player 11.1.115.27 and earlier versions on Android 4.x devices should update to Adobe Flash Player 11.1.115.34.
  • Users of Adobe Flash Player 11.1.111.24 and earlier versions for Android 3.x and earlier versions should update to Flash Player 11.1.111.29.
  • Users of Adobe AIR 3.5.0.600 and earlier versions for Windows should update to Adobe AIR 3.5.0.880.
  • Users of Adobe AIR 3.5.0.600 and earlier versions for Macintosh should update to Adobe AIR 3.5.0.890.
  • Users of the Adobe AIR 3.5.0.600 SDK (includes AIR for iOS) should update to the Adobe AIR 3.5.0.880 SDK (Windows) or Adobe AIR 3.5.0.890 SDK (Mac)

Flash Player 11.5 new features
Flash Player 11.5 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices. This version provides access to the Flash Player 11.5 runtime for Windows and Mac OS X desktop environments.

Flash Player 11.5 provides access to the AIR 3.5 SDK for Windows and Mac to target Windows, Mac OS, iOS and Android. The key features and benefits of AIR 3.5 are
  • Packaging multiple libraries in an ANE (iOS)
  • Debug stack trace in release builds of Flash Player
  • Invoke Event enhancement
  • Static linking of DRM (Desktop only)*

* Static linking of DRM contributes to the increase in size of the Flash Player binary.

Additional feature details available in the release notes.

Download Flash Player 11.5.502.135 (December 11, 2012)
The following downloads provide the Flash Player 11.5.502.135 installers for Windows and Mac OS X. Download the files appropriate for you:

Adobe Flash Player 11.5 Installer

Your Flash Player Version: 11.5.502.135

What's new in Flash Player 11.5.502.135?
Adobe Flash Player 11.5.502.135 contains the following updates and fixes:

New Features:
  • Added a new Android-specific xml element < containsvideo > in the application.xml.

Fixed Issues:
  • Large images not loading in Flash Player (3364103).
  • Video playback broken on Digital Theater AIR app (3364478).
  • Wrong layering/depth of video component after re-activating app on Nexus 7 (3356240).
  • Mac AIR not enforcing output protection when switching/dragging from internal to external monitor (3366931).
  • Output protection=REQUIRED content doesn't play on Retina Macbook pro internal monitor (3360459).

Security Fixed:
This release consists of security enhancements as listed below:
  • Fixed a buffer overflow vulnerability that could lead to code execution (CVE-2012-5676).
  • Fixed an integer overflow vulnerability that could lead to code execution (CVE-2012-5677).
  • Fixed a memory corruption vulnerability that could lead to code execution (CVE-2012-5678).

Sources:
Flash Player 11.5 Release Notes
Security Bulletin APSB12-27

No comments: