4 ms·

Really spotty story in terms of actual facts. Ok, it's an outdated version. How outdated? Are there any documented exploits that were fixed in the new version?

Really spotty story in terms of actual facts. Ok, it's an outdated version. How outdated? Are there any documented exploits that were fixed in the new version? The story never goes into detail about what exactly makes this version "vulnerable". I just installed snow leopard on my computer today. I haven't checked to see if my flash is in fact out of date (I'm typing this on my iPod touch), and I'll certainly upgrade if it is, but I see no reason to get excited about it.

pvg 17y ago
While it's light on details, it's unfortunately something worth getting somewhat excited about. A couple of very nasty vulnerabilities have been found in Flash over the last year or so - vulnerabilities exploitable across OSes. You can read about last year's stuff in exhaustive detail here: http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pd... A more recent advisory is http://www.adobe.com/support/security/advisories/apsa09-03.html http://www.adobe.com/support/security/advisories/apsa09-03.h... There was a blog post by Thomas Ptacek of Matasano security discussing the importance of Flash exploits recently but it seems to have disappeared temporarily in some sort of blog meltdown. Key quotes are still floating around the net though - "We have different versions of the OS, and we have Mac users. But we’ve only got one Flash vendor, and everyone has Flash installed. Why do you care about Flash exploits? Because in the field, any one of them wins a commanding majority of browser installs for an attacker."
colinprince 17y ago
first it will download any necessary software updates that have come out since the disc was pressed (from http://daringfireball.net/linked/2009/08/28/murphy http://daringfireball.net/linked/2009/08/28/murphy) Does anyone know if this covers Flash?
- eli 17y ago
  It does not.

pvg 17y ago

While it's light on details, it's unfortunately something worth getting somewhat excited about. A couple of very nasty vulnerabilities have been found in Flash over the last year or so - vulnerabilities exploitable across OSes. You can read about last year's stuff in exhaustive detail here: http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pd... A more recent advisory is http://www.adobe.com/support/security/advisories/apsa09-03.html http://www.adobe.com/support/security/advisories/apsa09-03.h... There was a blog post by Thomas Ptacek of Matasano security discussing the importance of Flash exploits recently but it seems to have disappeared temporarily in some sort of blog meltdown. Key quotes are still floating around the net though - "We have different versions of the OS, and we have Mac users. But we’ve only got one Flash vendor, and everyone has Flash installed. Why do you care about Flash exploits? Because in the field, any one of them wins a commanding majority of browser installs for an attacker."

colinprince 17y ago

first it will download any necessary software updates that have come out since the disc was pressed (from http://daringfireball.net/linked/2009/08/28/murphy http://daringfireball.net/linked/2009/08/28/murphy) Does anyone know if this covers Flash?

eli 17y ago
It does not.