dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
2380
share rss forum feed


dp
Premium,MVM
join:2000-12-08
Greensburg, PA
kudos:7

8 recommendations

Security updates available for Adobe Flash Player

Summary

Adobe has released security updates for Adobe Flash Player 11.5.502.146 and earlier versions for Windows and Macintosh, Adobe Flash Player 11.2.202.261 and earlier versions for Linux, Adobe Flash Player 11.1.115.36 and earlier versions for Android 4.x, and Adobe Flash Player 11.1.111.31 and earlier versions for Android 3.x and 2.x. These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system.

Adobe is aware of reports that CVE-2013-0633 is being exploited in the wild in targeted attacks designed to trick the user into opening a Microsoft Word document delivered as an email attachment which contains malicious Flash (SWF) content. The exploit for CVE-2013-0633 targets the ActiveX version of Flash Player on Windows.

Adobe is also aware of reports that CVE-2013-0634 is being exploited in the wild in attacks delivered via malicious Flash (SWF) content hosted on websites that target Flash Player in Firefox or Safari on the Macintosh platform, as well as attacks designed to trick Windows users into opening a Microsoft Word document delivered as an email attachment which contains malicious Flash (SWF) content.

»www.adobe.com/support/security/b···-04.html

Get Update: »www.adobe.com/products/flashplay···on3.html
--
Microsoft® Consumer Security MVP, 2004 - 2013
DP's Security Bits


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico
Thanks for this, dp See Profile !

As always, when installing the patch, it must be applied to each Browser you currently run.

Avoid all third-party offerings such as Google Toolbar, etc - unless you implicitly want these.


MarkAW
Barry White
Premium
join:2001-08-27
Canada
kudos:16

2 recommendations

reply to dp
Thanks dp See Profile got it.


art22gg
Premium
join:2005-02-16
Courtenay, BC
kudos:6
reply to dp
Thanks dp...much appreciated...hopefully there won,t be another release on the 12th Feb..


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:3
reply to dp
Got it. Thanks dp See Profile.


dolphins
Clean Up Our Oceans
Premium
join:2001-08-22
Westville, NJ
kudos:7
Reviews:
·Comcast

1 edit
reply to dp
Hmmm... what does this mean?




My ActiveX version stayed the same, only my Plug-in version updated.

Oh OK, ActiveX is the IE version. Here's an explanation. »forums.adobe.com/message/4644774···#4644774
--
Stop The Mindless Killings Stop Over Fishing


Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:11

1 edit
reply to dp
Excellent, thank you dp See Profile!


gugarci
Premium
join:2004-02-25
Lyndhurst, NJ
reply to dp
Thanks for the heads-up!


La Luna
RIP Lisa
Premium
join:2001-07-12
Warwick, NY
kudos:3
reply to dp
Thanks, got them!


chachazz
Premium
join:2003-12-14
kudos:9
Reviews:
·TELUS

1 recommendation

reply to dp
Thanks dp See Profile

Windows 8 - IE10 update




rcdailey
Dragoonfly
Premium
join:2005-03-29
Rialto, CA
reply to dp
Thanks. Too bad Chrome is always late in updating the version used there.


AB
Premium
join:2006-04-04
Leesburg, VA
kudos:3

3 recommendations

reply to dp
I think it's very courteous of Adobe/Macromedia to make sure a newer and/or remaining unaddressed exploit is included with every new and "patched" version of the Flash Player.


altermatt
Premium
join:2004-01-22
White Plains, NY
Reviews:
·Verizon FiOS

1 edit
reply to dp
said by dp:

Summary

...Adobe Flash Player 11.1.115.36 and earlier versions for Android 4.x,

I'm not seeing an Android version on the download page. IIRC, Android stopped offering Flash, but there was a workaround if you already had Flash that allowed updating, which I have in the past. But I don't see it offered here.

The bulletin says

Users of Adobe Flash Player 11.1.115.36 and earlier versions on Android 4.x devices should update to Adobe Flash Player 11.1.115.37*.
* Note: Applicable only for Android 4.x devices with Flash Player installed prior to August 15, 2012.

but it has no link for downloading it, although i do have Flash installed on my Android tablet (installed prior to August 15).

--
The truth of a thing is the feel of it, not the think of it. -- Stanley Kubrick

Fickey
Terrorists target your backbone

join:2004-05-31

1 edit
If you scroll down on this page, the latest apks for android are there (ICS & pre-ICS), you just have to sideload it.
»helpx.adobe.com/flash-player/kb/···ons.html

Edit: I'm on Gingerbread & can still get flash updates through the Play Store, not sure about ICS. If you currently have Flash installed, try going to My Apps > All in the Play Store App & see if it lists Adobe Flash Player. If so, click it & see what it offers. I already had the latest for GB from January.


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
I'm not sure your at any advantage running an outdated Android version


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:3
reply to Fickey
You cannot get Adobe Flash Player updates on Android Icecream Sandwich (ICS) or Jellybean (JB) unless it was pre-installed. Flash is not available for download from the Play Store app. As you said you must manually download the APK file (installer) and run that. Note that most devices won't allow APK's to be run manually--you have to enable that (and disable it again afterwards).

I've installed the latest Flash on my Android (JB) tablet and it seems to work ok in Firefox 18.0.2 for Android.
--
Don't feed trolls--it only makes them grow!


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:3
reply to siljaline
said by siljaline:

I'm not sure your at any advantage running an outdated Android version.

Fickey See Profile may not have a choice. I'm fortunate in that my tablet manufacturer released a JB (4.1.1) update for a product that came with ICS (4.0.4). That said many older devices (from the same manufacturer) are stuck with GB.
--
Don't feed trolls--it only makes them grow!


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Typically, carriers have O/S updates available via OTA.
If you choose not to use them, the onus in on the user or am I missing something.


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:3
What you're missing is that manufacturers/carriers don't release Android updates for all their products (old/new) forever.

Some devices will never progress beyond Android Gingerbread because the time/effort to do it isn't worth it to the manufacturer. For example why would they update a 2yr old phone?
--
Don't feed trolls--it only makes them grow!


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico

What you're missing is that manufacturers/carriers don't release Android updates for all their products (old/new) forever.

Agree, partially but if it's on OTA and your phone qualifies the onus is on the phone user to grab it.

For example why would they update a 2yr old phone?

See my first reply.
--
Canadians reserve the Right to - Arm Bears


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:3

1 recommendation

And how do you know if your assumptions apply to Fickey See Profile? Perhaps his/her device has never been offered anything beyond Gingerbread. Your comment implied that he should just update. My point is that perhaps that isn't possible.
--
Don't feed trolls--it only makes them grow!


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico
quote:
Your comment implied that he should just update.
I didn't imply anything, I said that if the Android O/S was still available OTA. why not go fetch it ?
There are a lot of liberable use of assumptions being hurled in my direction from your corner, I was trying to make some observations based on my experiences with delayed OTA Android O/S releases.
I do have some familiarity with the subject and am not wasting board thread-space (•)


altermatt
Premium
join:2004-01-22
White Plains, NY
Reviews:
·Verizon FiOS
reply to Fickey
said by Fickey:

If you scroll down on this page, the latest apks for android are there (ICS & pre-ICS), you just have to sideload it.
»helpx.adobe.com/flash-player/kb/···ons.html

Thanks, Fickey! I'm running the latest Android release on a pretty new Top-line (Asus Infinity) tab, and I had to force-install Flash initially and knew I might not be able to update from Google Play. I will try that first (it hasn't been offered) and then try your link.

StuartMW, if I have to install the APK manually, how do I enable that (where do I go?).
--
The truth of a thing is the feel of it, not the think of it. -- Stanley Kubrick


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:3

1 edit
Click for full size
Allow APK installs
said by altermatt:

StuartMW, if I have to install the APK manually, how do I enable that (where do I go?).

I put APK's on an SD card and put that in my tablet. I then use the Android My Files app to browse the card and click on the APK I wish to install. On my device I get a popup telling me that installation is a security risk and is disabled. I says where to go in Settings (under Security somewhere from memory) to change that. I enable APK execution (not called that), install what I want, and then disable it again.
--
Don't feed trolls--it only makes them grow!


altermatt
Premium
join:2004-01-22
White Plains, NY
Reviews:
·Verizon FiOS

1 edit
Thanks, StuartMW; I'm going to try browsing to the link you gave me with my tablet and downloading it right to the tablet, and if that doesn't work, I'll do the SD thing. There was no place to update the thing automatically---when I click Flash Player in Apps, it just brings up the Settings Manager.

LATE EDIT: Just browsed to the link StuartMW provided, downloaded the APK, clicked to install, got the warning and enabled the installation, and all went like a charm. Working perfectly, and went back and disabled the installation of unknown apps again.

--
The truth of a thing is the feel of it, not the think of it. -- Stanley Kubrick

Fickey
Terrorists target your backbone

join:2004-05-31

1 recommendation

reply to siljaline
said by siljaline:

I'm not sure your at any advantage running an outdated Android version

Interesting Android banter. But StuartMW's guess is correct, GB is the last OTA available for my current device. I'm actually running an excellent CM7 kang, there's a few unofficial ICS kangs available but they have bugs & limitations due to my device's locked GB bootloader.
--
Government controlled healthcare? Name one thing government does efficiently and effectively!


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico
Good to know Being a first time Galaxy Nexus user, I thought OTA applied to all that wanted the Android version upgrades, regardless of age.
There is an »Android specific board.