Adobe Releases Critical Security Update for Flash Player and AIR

[Peaches]

Adobe Releases Critical Security Update for Flash Player and AIR

Addresses six vulnerabilities with arbitrary code execution risk

Adobe has released an update to its Flash Player and AIR products, which address several vulnerabilities rated critical. A number of six arbitrary code execution flaws and one that can lead to information disclosure have been patched.

On December 3, the Adobe Product Security Incident Response Team (PSIRT) disclosed details about the company's upcoming security update for Flash Player to get people ready for the impending patching process. The Flash Player 10.0.42.34 and AIR 1.5.3 updates shipped yesterday, the same day when Microsoft released its scheduled monthly security bulletin.

All this is part of Adobe's new security strategy, which aims for a more uniform security incident response process, an area where the company suffered in the past. Adobe was heavily criticized by the security community for its inability to patch zero-day vulnerabilities in a timely manner or to convince users to update outdated software versions.

Full story at softpedia - http://news.softpedi...IR-129288.shtml