logo
Just in:
AI features in 84% of surveyed ransomware incidents // Indonesia wildfire haze darkens skies, closes Timor schools // Ransomware attackers target families as artificial intelligence spreads // Standard Chartered brings direct cryptocurrency trading to UAE clients // Google introduces Gemini 4 Argon to AI Studio // ZTE Hong Kong and LSCM Sign Memorandum of Understanding to Advance Hong Kong’s Digital and Intelligent Development // Houthi missile fragments injure expatriate in Riyadh // UAE passport leads 2026 mobility ranking with 182 destinations // IMF projects Asia-Pacific expansion easing through 2027 // Dubai Holding plans additional water park at resort // Microsoft and G42 detail AI agents in investment decisions // Flying Wedge displays prototype for autonomous combat programme // Dell shares tumble as Barclays questions AI valuations // Vingroup Announces the Establishment of VERTA – A New Educational Model for a Generation Growing Up in the Age of AI // Amid Mounting Global Health Crises, World Health Summit Closes in Berlin with New Commitments // Cybersecurity shares retreat as AI competition concerns emerge // Discover Surprising Southern Taiwan: Taiwan Tourism Administration Teams Up with Airlines & Travel Platforms with Multi-Million Rewards for International Travelers // Anthropic flags emerging self-replication risk across connected devices // De Beers Group and The Government of The Republic of Botswana Extend Partnership with Olympic Champion Letsile Tebogo as Global Ambassador // GFH Partners transfers Chicago logistics facility for $151 million //
0 likes

Adobe patches critical vulnerabilities in Flash, OEM

1494409013 screen shot 2017 05 10 at 08 44 02

Adobe has patched a number of vulnerabilities in Flash Player and Adobe Experience Manager (AEM) Forms in the company’s latest round of patch updates.

screen-shot-2017-05-10-at-08-44-02.jpg

According to the tech giant’s latest security advisory, seven critical issues (CVE-2017-3068, CVE-2017-3069, CVE-2017-3070, CVE-2017-3072, CVE-2017-3073, CVE-2017-3074) have now been resolved in Flash.

Six of the bugs are memory corruption issues and the seventh problem (CVE-2017-3071) is a use-after-free vulnerability.

All of the problems can lead to remote code execution and can be exploited by attackers to hijack user systems through crafted, malicious files and fraudulent web pages.

The updates impact Flash running on Windows, Mac, Linux and the Chrome operating system. Once updated, the most up-to-date version of Flash is version 25.0.0.171.

“Flash has historically been the top target for exploit kits,” Amol Sarwate, director of vulnerability research at Qualyson said. “However, we have observed that defender behavior — how fast patches are applied along with other factors — could have led to a decline in the number of Flash vulnerabilities being weaponised in exploit kits.”

“In 2016, the time to patch 80 percent of Flash vulnerabilities reduced by more than half to 62 days as compared to the previous year when it was 144 days, based on data from more than 3 billion scans carried out last year,” Sarwate added.

Adobe also took the opportunity to resolve a security flaw in Adobe Experience Manager (AEM) Forms on Windows, Linux, Solaris and AIX. The vulnerability, CVE-2017-3067, affects version 6.0, 6.1 and 6.2 and permits attackers to compromise the pre-population service in AEM Forms, resulting in information disclosure.

The bug has been patched by giving administrators new controls to restrict file paths and protocols used to pre-fill forms.

See also: Microsoft, Adobe make some progress on their joint cloud commitments

As always, Adobe recommends that the patches be applied immediately.

In March, Adobe resolved six critical flaws in Flash, including a buffer overflow vulnerability and memory corruption flaws.

(via PCMag)

Notice an issue?

Arabian Post strives to deliver the most accurate and reliable information to its readers. If you believe you have identified an error or inconsistency in this article, please don't hesitate to contact our editorial team at editor[at]thearabianpost[dot]com. We are committed to promptly addressing any concerns and ensuring the highest level of journalistic integrity.

Loading next story…

Related news

Just in:
BR Shetty pursues $15bn damages against Bank of Baroda // Microsoft and G42 detail AI agents in investment decisions // Anthropic flags emerging self-replication risk across connected devices // Amid Mounting Global Health Crises, World Health Summit Closes in Berlin with New Commitments // De Beers Group and The Government of The Republic of Botswana Extend Partnership with Olympic Champion Letsile Tebogo as Global Ambassador // Houthi missile fragments injure expatriate in Riyadh // ZTE Hong Kong and LSCM Sign Memorandum of Understanding to Advance Hong Kong’s Digital and Intelligent Development // Dell shares tumble as Barclays questions AI valuations // IMF projects Asia-Pacific expansion easing through 2027 // UAE passport leads 2026 mobility ranking with 182 destinations // Flying Wedge displays prototype for autonomous combat programme // US Treasury yields surge after inflation exceeds forecasts // Meta notifies 1,500 after GitHub code theft // GFH Partners transfers Chicago logistics facility for $151 million // IEA projects prolonged diesel supply squeeze through 2027 // A Women-Led Dubai Holiday Homes Operator Grows 42-Fold In Six Months // Siam Paragon Bangkok International Fashion Week 2026 Unites Thai Designers to Drive the Future of Thailand’s Fashion Industry // Standard Chartered brings direct cryptocurrency trading to UAE clients // AI features in 84% of surveyed ransomware incidents // Google introduces Gemini 4 Argon to AI Studio //