Hackers exploiting new Adobe Flash vulnerability
Internet users may have to be more careful in navigating sites
running Adobe's Flash software, due to a new vulnerability being
exploited in the wild.
Adobe, in a security advisory, said the newly discovered bug for CVE-2015-0313 is being "actively" exploited.
"A critical vulnerability (CVE-2015-0313) exists in Adobe Flash Player
16.0.0.296 and earlier versions for Windows and Macintosh. Successful
exploitation could cause a crash and potentially allow an attacker to
take control of the affected system," it said.
Citing information it has received, Adobe said the bug is being
actively exploited via drive-by-download attacks against systems running
Internet Explorer and Firefox on Windows 8.1 and below.
Adobe said it expects to release an update for Flash Player during this week.
Tech site The Hacker News noted this was the third time in the last few weeks that Adobe is dealing with a zero day vulnerability in Flash Player.
In late January, Adobe released an update for its Flash player to patch
a zero-day vulnerability discovered by French security researcher
Kafeine.
On January 22, the company released an emergency update for another zero-day flaw, CVE-2015-0310. — Joel Locsin/TJD, GMA News
Comments
Post a Comment