Hackers exploit unpatched Flash Player vulnerability, Adobe warns

The company releases updates for Reader, Acrobat and ColdFusion, but is still working on the Flash Player patch

Adobe Systems is working on a patch for a critical vulnerability in Flash Player that hackers are already exploiting in attacks. In the meantime, the company has released other security patches for Reader, Acrobat, and ColdFusion.

The Flash Player vulnerability is being tracked as CVE-2016-4117 and affects Flash Player versions 21.0.0.226 and earlier for Windows, OS X, Linux, and Chrome OS. Successful exploitation can allow attackers to take control of affected systems.

"Adobe is aware of a report that an exploit for CVE-2016-4117 exists in the wild," the company said in an advisory published Tuesday. "Adobe will address this vulnerability in our monthly security update, which will be available as early as May 12."

Also Tuesday, Adobe released updates for Reader and Acrobat that fix 92 vulnerabilities, the majority of which are rated critical and can result in arbitrary code execution.

The affected versions include Acrobat DC and Reader DC 15.010.20060 and earlier versions, 15.006.30121 and earlier versions, as well as Acrobat XI and Reader XI 11.0.15 and earlier versions. Users can update their product installations manually by choosing Help > Check for Updates.

Adobe also released updates for its ColdFusion application server. These updates address an input validation issue that could lead to cross-site scripting attacks, a host name verification problem affecting wild card certificates, and a Java deserialization vulnerability in the Apache Commons Collections library.

Adobe advises users to install ColdFusion (2016 release) Update 1, ColdFusion 11 Update 8, or ColdFusion 10 Update 19, depending on which version they use.

ColdFusion installations are sometimes targeted by attackers. In 2013, researchers documented an attack where hackers exploited a ColdFusion vulnerability to install malware on Microsoft IIS servers.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Lucian Constantin

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?