Adobe confirms Windows 8 users vulnerable to active Flash exploits

[tgell]

Microsoft's Windows 8 is vulnerable to attack by exploits that hackers have been aiming at PCs for several weeks, Adobe confirmed Friday.

Microsoft said it will not patch the bug in Flash Player until what it called "GA," for "general availability." That would be Oct. 26, when Windows 8 hits retail and PCs powered by the new operating system go on sale.

"We will update Flash in Windows 8 via Windows Update as needed," a spokeswoman said in a reply to questions. "The current version of Flash in the Windows 8 RTM build does not have the latest fix, but we will have a security update coming through Windows Update in the GA timeframe."

Article

[siljaline]

Windows 8 testers using Microsoft's Internet Explorer 10 browser risk running afoul of security exploits, as critical vulnerabilities in Adobe's Flash remain unresolved. Microsoft's decision to bake Flash directly into Internet Explorer 10 leaves the browser at risk: Adobe closed the security hole with a patch in August, but the browser will remain susceptible until Microsoft releases an update of their own. The flaw could cause Flash to crash, and allow an attacker to take control of a user's system. Fortunately, sidestepping it is simple: use another browser, or disable Flash.

Article

• Please see: http://www.wilderssecurity.com/showthread.php?t=331742