• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Adobe Warns Critical Flash Zero-Day Bug

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
Congratulations to Adobe on its three billionth critical Flash zero-day bug! We can honestly say that there is no way Adobe could put more critical flaws in its products if they tried! May they have many more in the years to come! Cheers!

A critical vulnerability exists in Flash Player 10.2.153.1 and earlier versions (Adobe Flash Player 10.2.154.25 and earlier for Chrome users) for Windows, Macintosh, Linux and Solaris, Adobe Flash Player 10.2.156.12 and earlier versions for Android, and the Authplay.dll component that ships with Adobe Reader and Acrobat X (10.0.2) and earlier 10.x and 9.x versions for Windows and Macintosh operating systems.
Click to expand...
 
Good freaking lord..no joke.

It has hit the point that it literally feels like the original dev team intentionally put these flaws in. I realize they didn't, but seriously...
 
I guess I'm glad that at least they acknowledge security flaws now. I have a feeling that Flash will be a solid product about the time that HTML5 and other options have effectively replaced it.
 
Really, it's the constant crashing that is getting to me.

I mean, all the bugs in it? Annoying, yes. But the crashing or locking up all the time! I swear, I'm about this -><- close to just uninstalling the damn thing on my *Windows* PC.

And people wonder why Apple refuses to allow it on their mobile devices...
 
just one time I would like to start up my computer without Adobe Updater asking me to update Flash yet one more time.
 
Never had Flash crash my PC once, but I do agree on the just about daily "update your Flash" prompts I get... What a POS....!!!
 
mzs_biteme said:
Never had Flash crash my PC once, but I do agree on the just about daily "update your Flash" prompts I get... What a POS....!!!
Click to expand...

The problem isn't the crashing, it's the fact that almost every critical bug is an exploit to install items onto your pc without permission. Half the people getting spyware today is probably getting it because of flash exploits. All it takes is some compromised ads that can appear anywhere.
 
ElGuapo242 said:
Adobe is a zero-day bug.
Click to expand...

Technically a zero day being an unknown vulnerability one couldn't accuse Adobe as such given the widespread knowledge of it's lack of security.

You have to wonder though if it's just bad software on the part of Adobe or if it's an inherent weakness in the kind of features Flash offers. If so is HTML5 going to be a nightmare of security?

I think it's going to get to the point where anything accessing the internet is realistically going to need sandboxing.
 
BigYoSpeck said:
You have to wonder though if it's just bad software on the part of Adobe or if it's an inherent weakness in the kind of features Flash offers. If so is HTML5 going to be a nightmare of security?
Click to expand...
HTML5 alone isn't. HTML5 provides a rough template in terms of how things should be presented and what markup is used to manipulate those elements, but the implementation itself rests on the shoulders of browser developers. Take a very poor implementation of what wraps around the various HTML5 specifications and, sure, you might have some serious security concerns there. But browser developers have an interest in maintaining strong security due to the competitiveness in that market, some are open source initiatives where you have a large number of people looking over the code for holes and some even offer cash rewards for spotting them. The bases are pretty well covered there.
 
Flash, like Java has been a security risk since day one. At least the Java people have a history trying to fix the issues, which is something very new to Adobe. I am not sure they are upto the job.
 
I want their shit off my PC. I haven't used Adobe reader for years and I don't want Flash either but no flash = no youtube etc.. LSO cookies, gee, what wonderful people they are not.
 
Will this be another "We'll have a fix ready asap" that turns into another "We have no known fix for this 'issue' ready now or in the near future."?

One thing I've noticed about Adobe is that their paid software products are fixed with pretty good speed, but the free ones hardly ever get timely patches/updates.
 
Azhar said:
just one time I would like to start up my computer without Adobe Updater asking me to update Flash yet one more time.
Click to expand...
It got to a point recently where I suspected something may have been wrong with my computer at home. Every time I logged on I was prompted to update Flash. Now this is a machine with only one account which only I know the >15 character password to, so I know it's not my eight year old daughter or my tech clueless wife mucking around causing problems. It's insane!
 
tesfaye said:
It got to a point recently where I suspected something may have been wrong with my computer at home. Every time I logged on I was prompted to update Flash. Now this is a machine with only one account which only I know the >15 character password to, so I know it's not my eight year old daughter or my tech clueless wife mucking around causing problems. It's insane!
Click to expand...

Yeah I also had to inspect my computer to see if there was anything wrong. I thought maybe the last update just failed to apply because of permission issue (I run my profile as Standard user instead of Administrator). So I checked in IE's and Firefox's add-in options and sure enough it reports the latest version.

You're doing it wrong if you make your user think there's a problem with your software's installer from the insane amount of updates. Adobe should consider talking to Microsoft and making Flash part of the Tuesday updates.
 
Every time a zero day bug is found in an Adobe product, Steve Jobs sheds on tear of joy and thus the oceans were created.
 
Azhar said:
Yeah I also had to inspect my computer to see if there was anything wrong. I thought maybe the last update just failed to apply because of permission issue (I run my profile as Standard user instead of Administrator). So I checked in IE's and Firefox's add-in options and sure enough it reports the latest version.
Click to expand...
Same here. At work I got my way and we do not run users as admin on the Windows 7 desktops. Standard users all the time, even the admins (disabling UAC is not allowed). Some hate it but too bad.

Azhar said:
You're doing it wrong if you make your user think there's a problem with your software's installer from the insane amount of updates.
Click to expand...
Absolutely!
Azhar said:
Adobe should consider talking to Microsoft and making Flash part of the Tuesday updates.
Click to expand...
Fuck that, can you imagine what Patch Tuesday would be like? Oh man, Microsoft even considering it? I can imagine whomever is on the Microsoft end of the converation breaking out in a Ricky Gervais laugh. I guess that would make Adobe the Karl Pilkington of the conversation...
 
Azhar said:
You're doing it wrong if you make your user think there's a problem with your software's installer from the insane amount of updates. Adobe should consider talking to Microsoft and making Flash part of the Tuesday updates.
Click to expand...

Yeah they should make their own updater stop sucking so much and let it silently update instead of popping up that bullshit dialog that makes it look like it just updated Flash twice. Also based on how you install Flash (through a browser or from an EXE), it will have different update behaviors. Then they let Flash in Chrome have an update cycle different from both of those other methods.

Adobe continually shoots themselves in the foot and helping out the push to HTML5. They are in danger of becoming another Real Media in the next few years.
 
Steve,

I think it'd be easier on you to post when Adobe does not have a critical bug.
 
You must log in or register to reply here.
Back
Top