‘Critical vulnerability’ fixed in Adobe Flash Player update for Android

mobile

Adobe has issued an update for its Adobe Flash Player application on Android smartphones. “A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android,” the company said. “This memory corruption vulnerability (CVE-2011-2110) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild in targeted attacks via malicious Web pages.” The latest version, 10.3.185.24, is available in the Android Market for free now.

Read

25 Comments
  • Anonymous

    Awesome work!!! They are really getting good at patching these vulnerabilities. Must be from all the practice. True story.

    • Bringit

      It’s OPEN season for practice.  

      • Anonymous

        Yes sir. Looks like it. I guess this is what android fans mean by the
        FULL web experience. I had forgotten the pleasure of people stealing
        my stuff and screwing up my computer. Bring flash to ios!!!

      • sirpaul

        ^^^^^ This is the reason BGR put this article up. As if iOS didn’t have its fair share of vulnerabilities…

      • Anonymous

        ios has zero vulnerabilities. None. Nada. Zip. Zilch. Squat. Steve
        Jobs has built the perfect operating system. It just works. Anything
        negative u have read about ios is all google’s lies. True story.

      • sirpaul

        iOS has had plenty. Just do a Google search. True story.

      • Anonymous

        Yeah. Google it. Lol. Just like when google paid those guys to write
        glass shit. It’s all a fabrication. U know it. I know it. True story.

      • sirpaul

        Yeah then Google paid Apple to put out a fake fix too, right?

      • Anonymous

        Bingo!

  • http://twitter.com/yyandrew Andrew Yang

    How often do we hear this same old story? Adobe REALLY needs to be more transparent and regularly announce the discovery of these critical security vulnerabilities BEFORE a patch is released. This will at least allow users to be cautious when using Adobe products.

    • http://twitter.com/jj_hh1 J Hamburg

      are you kiddin’? they’d rather kill their Linux support then get more transparent :)

    • Anonymous

      At this point, you still need to be told to be cautious when using Flash?

  • Anonymous

    I am still waiting on the good, fast, secure version of Flash for mobiles that Adobe promised was just a few months away — a promise they made a few years ago.

    • Anonymous

      For what it’s worth, Flash is smoother than it was and the ever-increasing horsepower of Android phones means that the experience is only getting better.

  • Anonymous

    They need to rename this product to “Patchy” Flash.

  • Alexander530

    I bet none of the android fanboys experience any flash problems or vulnerability issues.

  • Anonymous

    Adobe is a critical vulnerability.

  • http://twitter.com/randomwatson B

    How many security holes can a piece of tech have?!?

    • http://www.youtube.com/watch?v=AR6HpRLyzMY Walter Sobchak

      Infinite. No matter the tech, security is a process, not a product.

  • Anonymous

    I’ve never seen a piece of software needing to be updated so many times. It’s a shame that we are being nurtured to believe that continuously needing  an “update” is good. The questions is, why isn’t this piece of software no categorized as a lemon? It is flawed to no end. Yet we, as a whole, continue to use or maybe even forced to use this application that seems vulnerable to um, everything. Do the masses not see a problem with this?

    /just sayin’

    • Anonymous

      Any piece of software with massive amounts of exposure is going to need patching all the time. Would you rather they just put the software out once and never patch it again, or would you rather have them constantly fixing the holes that they find? Like@WaltSobchak:disqus said, security is a process.

      • Anonymous

        Yeah, but damn! The frequency that these updates are needed…..sheesh.

      • Anonymous

        Honestly, I think it’s just because they don’t have any kind of scheduled rollout date. They just push them out whenever they finish the patches. Microsoft has scheduled patch release dates, but if you check how many there can be in there, I think (based on no real evidence whatsoever) the amount of patches found per given amount of time could very well be comparable.

  • Anonymous

    90% of the sites I go to and ask me for a freggin flash update, I just leave. Adobe is really just getting on my nerves with the bullshit. HTML5, FTW………….

  • Anonymous

    Well another day another useless feature for fandroid

blog comments powered by Disqus