Windows 10: Adobe updates Flash Player to resolve 79 security flaws

Adobe updates Flash Player to resolve 79 security flaws




Adobe has pushed out an updated version of Flash Player that resolves a total of 79 security flaws in its last security update of the year.

The release addresses critical vulnerabilities that could potentially give an attacker the ability to take control of an affected system, according to Adobe.

The mammoth list of updates (CVE-2015-8045 through to CVE-2015-8457) impacts all computer systems and fixes problems including stack overflow vulnerabilities, memory corruption flaws and buffer overflow issues, all of which can lead to remote code execution.

The update brings Flash to version 20.0.0.228 for Internet Explorer (IE) and Chrome on Windows and Mac computers and 20.0.0.235 for versions of Firefox and Safari.

AIR Desktop Runtime, AIR SDK, AIR SDK & Compiler and AIR for Android are also updated to Flash version 20.0.0.204 for Windows, Macintosh, Android and iOS in the latest release.

Users of Flash Player 11.2 or later for Windows or Flash Player 11.3 or later for Macintosh, who have selected the option to 'Allow Adobe to install updates', will receive the update automatically, Adobe stated in its notes.

Users who do not have the 'Allow Adobe to install updates' option enabled can install the update via the update mechanism within the product when prompted. It is highly advised that users update their systems in order to stay protected against hackers and cyber criminals.

Adobe said a number of firms had helped to find the numerous security gaps in the much-maligned Flash software, including Google's Project Zero, Palo Alto Networks and HP's Zero Day Initiative.

Following the release, Wolfgang Kandek, chief technology officer at Qualys, said: "All but three of the vulnerabilities could be used by an attacker to gain code execution running under the user in the browser.

"Flash-based attacks have been a favourite for attackers this year with many exploit kits providing very up-to-date exploits - include this in your high priority items."

The update comes at the same time Microsoft issued its final update of 2015 that took the total number of patches for the year to 135, far in excess of the total from 2014, partly caused by the release of major news tools, specifically Windows 10.

Source

Adobe updates Flash Player to resolve 79 security flaws - IT News from V3.co.uk

:)

 

Updates KB3188128 and KB3188128

I have found that the Adobe Flash player security update has cause and issue. Any video using flash will not start or stops responding. I un-installed the update and restarted and it resolved the issue.

 

Windows 10 Update Faults

Thank you for the information. Even though you don't have Adobe Flash Player installed and the security update is for Adobe Flash Player it is still okay to have it updated, it's just that Microsoft is releasing these updates for all Windows/Microsoft users
regardless if you don't have the said program installed. And many applications/programs today requires Adobe Flash Player that's why Microsoft is continually releasing security updates.

Regards.

 

Damn Flash and its vulnerabilities.

 

After this latest upgrade, I can no longer view videos from RTVE.es (Spain TV). Must be a DRM upgrade issue. Arrgghh!!!

 

Version 20, sounds big by the looks of it.

But Adobe is silently preparing to ditch Flash, transitioning to HTML5 Canvas/WebGL.
Welcome Adobe Animate CC, a new era for Flash Professional | Adobe Flash Professional Team Blog

For video playback alone, it should work fine already in HTML players, in the latest browsers, but there are still some websites that only work with Flash just for watching a video or two...

 

You Tube works in HTML as I watch it and one thing I can say it is a lot sharper picture, and does not stutter or lag.

 

The trouble is that for a lot of animation tasks Flash is incredibly easy to use (e.g. adding pivot points to images).

Edge is OK for simple slideshows and web page widgets, trying to do anything else is ridiculously difficult (i.e. you may as well write your own JavaScript code from scratch).

As a result, Flash will be around for many years.

 

After days if trouble shooting the KB 31116900 update I found out that my second computer no longer had Flash Player.
I did a full download of Flash Player all my problems are gone.
So far. the network connections between the two computers, Is fine.

Joe

 

Whats the best way to update flash? All the download sites just link back to flash page and in Chrome of course it has its own flash built in so it refuses to download. If you click on choose another operating system on their page, you only get two options under Windows 10, Opera and Chrome, or Firefox. I don't see the general non-IE version which normally you can download for the whole OS.

 

You're right about the simplicity because it had so much time to evolve.
Animate CC is only in the begin stages, just give it some time. *Smile
If you are referring to Edge Animate CC, or something like that, I still don't know if Animate CC without the Edge is the same thing as that one is planned to replace Flash Pro. For that matter we will expect more features in time.

 

You have downloaders and full installers (aka that aren't dependent on other downloads)
Flash flavors (different installers) are active-x, npapi and ppapi for IE, Firefox and Chrome respectively.

Getting the full installers:

Flash links to latest versions:
IE:
(ACTIVE-X)
link

firefox(es):
(NPAPI)
link

chrom(e)(ium)s:
(PPAPI)
link

Flash... aaa... savior of the universe!
*Cool

 

I get my Flash installers (full, not web shortcuts) from Filepuma.

I used Edge Animate CC in the final term of my Web Design diploma (first 6 months of 2015).

 

lol there are a whole range of sites like this, filehorse, filehippo and now filepuma.

 

I have Filepuma and FileHorse tabs permanently open in one of my PM profiles. *Smile