Adobe has released Flash Player 16.0.0.235 for Windows and Macintosh, and Flash Player 11.2.202.425 for Linux. Flash Player 16.0 includes a new and improved functionality, important bug fixes and security updates. These updates also address multiple critical-risk vulnerabilities that could potentially allow an attacker to take control of the affected system.
Adobe is aware of reports that an exploit for CVE-2014-9163 exists in the wild, and recommends users update their product installations to the latest versions:
- Users of Adobe Flash Player 15.0.0.239 and earlier versions for IE should update to Adobe Flash Player 16.0.0.235.
- Users of Adobe Flash Player 15.0.0.239 and earlier versions for Firefox (Windows) should update to Adobe Flash Player 16.0.0.235.
- Users of Adobe Flash Player 15.0.0.239 and earlier versions for Macintosh should update to Adobe Flash Player 16.0.0.235.
- Adobe Flash Player installed with Google Chrome will be automatically updated to the current version.
- Adobe Flash Player installed for Internet Explorer on Windows 8.x will be automatically updated to the current version.
- Users of Adobe Flash Player 11.2.202.424 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.425.
Overview
Adobe Flash Player 16.0 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices. This release provides access to the Flash Player 16.0 runtime for Windows desktop and Mac OS environments.
What's new in Flash Player 16
Adobe Flash Player 16.0 includes the following:
PPAPI Installers for Windows and Mac
Flash Player is now available for all Chromium based browsers using the PPAPI interface.
Stage3D - Standard Constrained Profile
Flash Player 16 included a new Standard Constrained profile. Like Baseline Constrained, Standard Constrained targets older and lower powered GPUs on both desktop and mobile devices.
For a full list of features in Flash Player and AIR, including features introduced in previous releases, please review the document here.
Download Flash Player 16.0.0.235
The following downloads provide the Adobe Flash Player 16.0.0.235 installers for Windows, Linux and Mac OS X. Download the files appropriate for you:
Security fixes:
This build contains the following security fixes:
- Fixed memory corruption vulnerabilities that could lead to code execution (CVE-2014-0587, CVE-2014-9164).
- Fixed a use-after-free vulnerability that could lead to code execution (CVE-2014-8443).
- Fixed a stack-based buffer overflow vulnerability that could lead to code execution (CVE-2014-9163).
- Fixed an information disclosure vulnerability (CVE-2014-9162).
- Fixed a vulnerability that could be exploited to circumvent the same-origin policy (CVE-2014-0580).
Sources:
Adobe Flash Player 16 Release Notes
Adobe Security Bulletins and Advisories
APSB14-27 Security updates available for Adobe Flash Player
No comments:
Post a Comment