Share

Adobe fixes critical flaws in Flash Player and Digital Editions

Starting October 11, 2016, old Flash Player ActiveX versions will be blocked on Windows 7 and Windows Server 2008 R2, because the software isn’t updated automatically on these platforms and users need to manually download updates via Windows Updates.

Advertisement

Extended support release for Windows and macOS / OS X.

Yesterday, Adobe released updates for Adobe Flash, Adobe Digital Editions, and Adobe AIR SDK & Compiler. However, Adobe has announced last month that it plans to bring the NPAPI Flash Player plug-in for Linux and also update it to the modern release branch, which is now at version 23.

Built-in Flash Player for Google Chrome and Microsoft Edge / Internet Explorer 11.

We remind you that the Flash Player for Linux has still received security patches over the years, but it didn’t benefit from new features. However, last month the company announced that it plans to bring the NPAPI Flash Player plug-in for Linux in sync with the modern release branch, which is now at version 23.

The Flash Player desktop runtime 22.0.0.211 and earlier for Microsoft Windows and Apple OS X / macOS are vulnerable, as are Google’s ChomeOS and the same version shipped with Microsoft’s Edge and Internet Explorer 11 web browsers in Windows 8.1 and 10.

The update to Digital Editions covers eight memory corruption and use-after-free problems impacting version 4.51 and earlier for Windows, Macintosh, iOS and Android. When you combine the vulnerabilities patched for the three products, there are 35 exploits fixed, with many of them allowing code execution.

Advertisement

Finally, the company updated its Adobe AIR SDK & Compiler for Windows to version 23.0.0.257. This update adds support for secure transmission of runtime analytics for AIR applications on Android.

Microsoft Will Block Outdated Versions of Flash Player Starting October