My friend has not updated Adobe Flash player in years.

How at risk is she I'm going to help her upgrade to the newest version soon.

 

It's always best to keep all of your programs and operating system/s updated .

More info on how to update Flash is here.

While your updating, check the link in my siggy and run the online Secunia scan and update everything else.

 

The attacks using malicious flash files fall into two categories:

1) The user views one on a web site. These are usually posted on sites that you wouldn't classify as family oriented. More likely is to find a flash exploit where the user is tricked into updating the flash player, as was seen on Facebook earlier this year:

​

How likely is she to fall for such a trick?

2) Drive-by download attack.

==> Does she have the browser properly configured for Javascript? These exploits require scripting to run. Typical code:

​

==> Does she have protection against intrusion of unauthorized executables? These malicious files trigger the download of malware.
Typical file:

Malicious swf files?
http://isc.sans.org/diary.html?storyid=4468

This will help to decide how much at risk she is.

----
rich

 

Uninstall flash from add/remove programs. both activex and plugin if both are installed.

uninstall shockware player if installed using add/remove programs.

download uninstaller/uninstallers from here

once completed install the lastest versions from the link above.

 

I suspect her vulnerabilities are not solely with an outdated Adobe. If she has not updated it, chances are her Java, Flash Player, etc. are outdated.
Suggest run the Secunia Software Inspector to identify other vulnerabilities.

Cheers

 

Hello,

What version is she at?

Help her upgrade top the latest version of Adobe Flash Player and then check other programs she has that may require updating such as the operating system itself (Windows Update), her browser (is she still on IE6 or Netscape?), her antivirus, and others. Then you should probably inform her on how to keep her system and it's software programs up to date to stay secure, add new useful features, and increase performance and stability.

Regards,

Mark.