Microsoft has announced the availability of an update for Internet Explorer 10 Adobe Flash Player, supported on Windows 8, Windows Server 2012, and Windows RT. Recently, there were some vulnerability issues with Adobe Flash player that led to system crashes and allowed the attackers to take control of the affected systems.
The update therefore has been released in the light of such occurrences to reduce the severity of exploitation. The update is mainly aimed to address the vulnerability in Adobe Flash Player by updating the affected Adobe Flash libraries contained within Internet Explorer 10.
Adobe hence, recommends users update their product installations to the latest versions using update management software, or by checking for updates using the Microsoft Update service. Since the update is cumulative, only the current update is offered. Customers are not required to install previous updates as a prerequisite for installing the current update.
Here’s a summary of the bulletin:
Adobe is aware of reports that CVE-2013-0643 and CVE-2013-0648 are being exploited in the wild in targeted attacks designed to trick the user into clicking a link which directs to a website serving malicious Flash (SWF) content. The exploit for CVE-2013-0643 and CVE-2013-0648 is designed to target the Firefox browser.
Adobe recommends users update their product installations to the latest versions:
- Users of Adobe Flash Player 11.6.602.168 and earlier versions for Windows and Adobe Flash Player 11.6.602.167 and earlier versions for Macintosh should update to Adobe Flash Player 11.6.602.171.
- Users of Adobe Flash Player 11.2.202.270 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.273.
- Adobe Flash Player installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 11.6.602.171 for Windows, Macintosh and Linux.
- Adobe Flash Player installed with Internet Explorer 10 for Windows 8 will automatically be updated to the latest version of Internet Explorer 10, which will include Adobe Flash Player 11.6.602.171 for Windows.
To verify the version of Adobe Flash Player installed on your system, access the About Flash Player page, or right-click on content running in Flash Player and select “About Adobe (or Macromedia) Flash Player” from the menu. If you use multiple browsers, perform the check for each browser you have installed on your system.
Update download page : KB2819372. Source – TechNet.
