Crack: Allow attackers to take over your PC - Adobe Flash strikes again.

[denem]

Adobe is the most readily-exploited software vendor (per US-CERT), but why rest on it's laurels?

10-28-2010: Another Zero Day Flash Exploit. No fix till Nov. 9. Later still, Nov 15 for Adobe Reader (which also integrates Flash for your enjoyment)

and yeah, it's already being exploited by in the wild

Wonder why Apple stopped putting Flash into their OS X installs and Microsoft never packed it with Windows? Google knows better - integrated in Chrome, Chorme, OS and Android.

New Adobe Flash Bug Being Exploited (TheatPost)

A critical vulnerability has been identified in Flash Player 10.1.85.3 and earlier versions for Windows, Macintosh, Linux and Solaris; Adobe Flash Player 10.1.95.2 and earlier versions for Android; and the authplay.dll component that ships with Adobe Reader 9.4 and earlier 9.x versions for Windows, Macintosh and UNIX, and Adobe Acrobat 9.4 and earlier 9.x versions for Windows and Macintosh. This vulnerability (CVE-2010-3654) could cause a crash and potentially allow an attacker to take control of the affected system," Adobe said.

The new Flash bug came to light early Thursday when a researcher posted information about the problem, as well as a Trojan that is exploiting it and dropping a pair of malicious files on vulnerable PCs. Researcher Mila Parkour tested the bug and posted a screenshot of the malicious files that a Trojan exploiting the vulnerability drops during its infection routine. Adobe has since confirmed the vulnerability and said that it is aware of the attacks against Reader.

http://threatpost.com/en_us/blogs/new-adobe-flash-bug-being-exploited-102810

Who needs the NSA when you've go Adobe?

[BootinUp]

1. I may have experienced the Reader bug today

Trying to load a pdf with the IE plugin caused IE to crash.

[denem]

2. Bypass with Foxit

http://www.foxitsoftware.com/pdf/reader/

You will have to edit the helper applications.

[denem]

3. Kicked: Uninstall Flash or maybe install malware - until Nov 9

[pgodbold]

4. Bitten by a copy of pagemaker as a child. nt

[marybourg]

5. Can't stand it & refuse to have it on my computer. Yeh, so I don't

get to see You Tube. Big deal. Also don't get to see many annoying flashing & rotating ads.

[denem]

6. Non-Flash YouTube available from Google here:

http://www.youtube.com/html5

[marybourg]

8. Yes, I know about this, but I fear once it gets going, the same rotationg and flashing

ads that now infest Flash will go there to reach I-Pad and other current non-flash users. But thanx anyway.

[smiley_glad_hands]

7. I like flash, every computing device is vulnerable to some kind of attack.

Including mac osx and ios devices.

Droid + Flash = Win