{"id":65572,"date":"2014-04-29T12:03:31","date_gmt":"2014-04-29T10:03:31","guid":{"rendered":"http:\/\/onsoftware.en.softonic.com\/?p=65572"},"modified":"2025-07-02T00:43:34","modified_gmt":"2025-07-02T07:43:34","slug":"security-bug-found-in-adobes-flash","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/security-bug-found-in-adobes-flash\/","title":{"rendered":"Zero Day security hole in Adobe’s Flash"},"content":{"rendered":"

Yesterday it was Internet Explorer<\/a>, and now Adobe Flash<\/a> has a ‘zero day’ security exploit. It was discovered by Kaspersky Labs, and confirmed by Adobe, which has issued a patch. The vulnerability is found in a Flash component called Pixel Bender, which handles video and image processing.<\/p>\n

The attacks originated from a Syrian Ministry of Justice<\/strong> site, and are the latest examples of security vulnerabilities being exploited by governments. Stuxnet, Flame, and Red October were all state sponsored attacks, and the United States’ NSA was rumored to know about and be exploiting the Heartbleed bug before it was exposed.<\/p>\n

While the exploit could affect all Flash users, Kaspersky said it is sure that the attacks from the Syrian Ministry of Justice were aimed at a ‘very specific group of users’. However, now the exploit has been exposed and Adobe has patched it, users are advised to update as soon as possible.<\/p>\n

If you use IE 10<\/strong> or 11<\/strong> on Windows 8, the update will arrive automatically, but they sometimes take hours to be delivered. You can update Flash manually if you’re worried about the potential security risk. If you use Firefox on Windows<\/a>, you have update Flash for Firefox and Internet Explorer separately.<\/p>\n

Download or update Flash here<\/a>.<\/p>\n

Source: Arstechnica<\/a>\/Kaspersky<\/a><\/p>\n

h4>RELATED STORIES<\/p>\n