Critical vulnerability in Adobe Flash: You have to uninstall it immediately
Do not end the flaws for Adobe Flash: reveal the existence of new high-risk vulnerabilities.
After only one day of the issuance of monthly security patches for its software, including Flash Player, Adobe confirms the presence of a critical vulnerability in all versions of Flash, or Windows, Mac and Linux.
Adobe has also added that this vulnerability has already been exploited to attack users’ computers, but added that these attacks so far have been limited and targeted. It seems that the exploit is used primarily to attack high-level institutions. Using the exploit, an attacker can crash the target PC or even take control.
The only way to protect against this serious security gap is to completely uninstall Flash Player from your computer, as candidly admits the same Adobe. ” A critical vulnerability (CVE-2015 to 7645) has been identified in Adobe Flash Player 19.0.0.207 and earlier versions for Windows, Mac and Linux, ” it said in a security bulletin published by Adobe. ” The exploit can cause crash and potentially allow attackers to take control of the computers of the victims.”
Adobe plans to release an update within the next week in order to overcome the problem of security. The security flaw was discovered by Trend Micro, who wrote on his blog: ” The Trend Micro researchers have found that many attacks of the campaign Operation Pawn Storm were made through this vulnerability of Adobe Flash. Pawn Storm is a long campaign term goals aimed to attack by several high-profile and that for the first time in two years has seen a zero-day vulnerability for Java. ”
In recent months, Pawn Storm has targeted ministries and political institutions around the world. Through emails with URL masked hackers managed to circumvent the security systems of their targets. URLs have been masked so as to induce the target to think that they are about to read news of international importance of a certain gravity.
” We noticed that the host of the URL of the new zero-day exploit in Flash is similar to that used by Pawn Storm for attacks on NATO and the White House last April, ” said Trend Micro.
