Last week, Adobe issued a security patch fixing a critical flaw in its Flash Player that could allow a remote hacker to take complete control of Windows, Mac and Linux computers. If you have not yet updated your flash player then you are at great security risk as this flaw is being exploited in the wild.
This Flaw can be used to remoletly control an user's computer. It was made public last week by security research firm Fireeye, who discovered the flaw and reported it to Adobe. The publisher has now made a patch available, which can be downloaded using the auto-updater included with Flash.
But this is not the end. An independent researcher Kafeine reported that the Flash flaw had also been incorporated into the Magnitude and Angler EK exploit kit. Since the method of exploiting the Flash vulnerability has now been built into malware kits that any malicious hacker could potentially use, makes the threat much more significant - as a wider number of criminals can now easily exploit it.
Adobe says the following versions of Adobe Flash are vulnerable to the exploit :
- Adobe Flash Player 18.104.22.168 and earlier versions for Windows and Macintosh
- Adobe Flash Player Extended Support Release version 22.214.171.1242 and earlier 13.x versions for Windows and Macintosh
- Adobe Flash Player 126.96.36.1996 and earlier 11.x versions for Linux
Adobe recommends users update their product installations to the latest versions :
- Users of the Adobe Flash Player Desktop Runtime for Windows and Macintosh should update to Adobe Flash Player 188.8.131.52.
- Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 184.108.40.2066.
- Users of Adobe Flash Player for Linux should update to Adobe Flash Player 220.127.116.118 .Adobe Flash Player installed with Google Chrome and Adobe Flash Player installed with
- Internet Explorer on Windows 8.x will automatically update to version 18.104.22.168.
If you have not yet updated to the latest version of flash then you can download the most recent version of Flash which always available from the Flash download page. Installing the latest version of Adobe Flash will leave the system secure once again.