Adobe has released a new update for its Flash Player to patch critical vulnerabilities that could allow attackers to install malware on computers. This new update fixes 23 security flaws of which 18 can potentially be exploited to execute malicious code on the underlying systems. Adobe is not aware of any exploits being publicly available for the fixed vulnerabilities.
The update also addresses 5 flaws that when exploited could lead to information disclosure. This update also improves protections against vector length corruptions and malicious content from vulnerable JSONP callback APIs used by JavaScript programs running in browsers.
Adobe has advised Windows users to update their Flash Player to 19.0.0.185. While Linux users should update to Flash Player 11.2.202.521. Users running the extended support release should make sure they are running the latest 18.0.0.241 version.
The Flash Player plug-in bundled with Google Chrome, Microsoft Edge and Internet Explorer 10 and 11 will be automatically updated through those browsers.
To verify the version of Adobe Flash Player installed on your system, access the About Flash Player page, or right-click on content running in Flash Player and select “About Adobe (or Macromedia) Flash Player” from the menu. If you use multiple browsers, perform the check for each browser you have installed on your system.
Users of Flash Player 11.2.x or later for Windows, or Flash Player 11.3.x or later for Macintosh, who have selected the option to “Allow Adobe to install updates” will receive the update automatically. Users who do not have the “Allow Adobe to install updates” option enabled can install the update via the update mechanism within the product when prompted.
Adobe Systems also released updates for the AIR desktop runtime, software development kit (SDK) and compiler, which bundle Flash Player. The new AIR version is 19.0.0.190. Adobe also recommends Android users of AIR to update to version 19.0.0.190 by visiting the Google Play Store. You can also follow the steps found here, to determine if your Adobe Runtime needs an update.
Source: Adobe
