Adobe Flash Player 10.3.181.26

Indeed thanks very much!

 

Very good, Carbonyl. Thanks for setting me (us?) straight!

 

Hi,

I recommend that all users update their Flash player from here:

http://www.adobe.com/products/flashplayer/fp_distribution3.html

(Note that it is the full installation)

I checked the behavior of the standard Adobe Flash update tool and found that it is not cumulative. I performed several tests on four separate workstations and observed that the update was not updating older versions of the NPSWF32.dll file. At first I thought I made a mistake and installed the IE update. But I double and triple checked and eventually tested it on four workstations to make sure.

Most other major software companies release a 'cumulative' update... meaning that no matter what state your installation is in... the update will bring it up to date. It appears that Adobe does not do this... and only updates the binary effected by a specific vulnerability.

If I would not have manually checked the version info and signature date on the PE files... all of the workstations here in my laboratory would have remained vulnerable.

 

"Patching Flash: CVE-2011-2110 post mortem": http://research.zscaler.com/2011/06/patching-flash-cve-2011-2110-post.html

 

"Advanced Exploitation Of Flash Vulnerability In The Wild" : http://www.darkreading.com/blog/230...ation-of-flash-vulnerability-in-the-wild.html