Adobe Flash Player 10.1.85.3

[James_A]

Adobe have released Adobe Flash Player 10.1.85.3

This fixes a security vulnerability that is being actively exploited in Windows.

From Adobe’s Security Bulletin:

This vulnerability (CVE-2010-2884) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against Adobe Flash Player on Windows.

---

If you don't like Adobe's Download Manager and want to download the standalone installers for IE or Firefox, see the links I posted for Internet Explorer and for Firefox in this topic.

.

[James_A]

Full details of how attackers can take over your computer, if you haven't updated, are not yet available, but:-

By convincing a user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), PDF file, Microsoft Office document, or any other document that supports embedded SWF content, an attacker may be able to execute arbitrary code.

Google Chrome users should update to version 6.0.472.62 of Chrome, since Chrome also has an embedded Flash player.

.

[Eldmannen]

This is a good time to mention FlashBlock and NoScript.

[James_A]

This is a good time to mention FlashBlock and NoScript.

Absolutely.

To disable Flash in NoScript, use: Options... > Embeddings > Forbid Adobe Flash

.