Adobe Flash – Security update addresses CVE-2015-0313
Uncategorized February 5th, 2015Users should update Adobe Flash as they are prompted to ensure protection against in-the-wild zero day attacks circulating as malicious advertisting (where just visiting the site, may lead to an infection)
https://helpx.adobe.com/security/products/flash-player/apsa15-02.html
A critical vulnerability (CVE-2015-0313) exists in Adobe Flash Player 16.0.0.296 and earlier versions for Windows and Macintosh. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. We are aware of reports that this vulnerability is being actively exploited in the wild via drive-by-download attacks against systems running Internet Explorer and Firefox on Windows 8.1 and below.
Users who have enabled auto-update for the Flash Player desktop runtime will be receiving version 16.0.0.305 beginning on February 4. This version includes a fix for CVE-2015-0313. Adobe expects to have an update available for manual download on February 5, and we are working with our distribution partners to make the update available in Google Chrome and Internet Explorer 10 and 11. For more information on updating Flash Player please refer to this post.
More information can be found on malicious threats circulating in the wild here: