Pre-Release Version Of Windows 8 Contains Flash Hole

snoopy · Sep 11, 2012

Pre-release version of Windows 8 contains Flash hole

Flash Embedded In IE icon Like Google Chrome, the forthcoming version 10 of Microsoft's Internet Explorer includes an integrated version of Flash Player and updates it automatically. Or it doesn't, because Windows 8 continues to use version 11.3.372.94, released on 19 July 2012, even though Adobe released a security update on 15 August that was followed by another update only a week later.

Adobe's Windows version of Flash Player has since been updated to version number 11.4.402.265. Among other things, it closed the CVE-2012-1535 zero-day hole. This vulnerability involves a buffer overflow that can be triggered by specially crafted font files in a Flash document. Attackers exploit it using the heap spraying technique. They then download an executable program in several steps, as described, for example, by AlienVault. The specially crafted Flash data is embedded in a Word document. Adobe rates the hole at the highest threat level of 1.
Click to expand...

Read more here: http://www.h-online.com/security ews/item/Pre-release-version-of-Windows-8-contains-Flash-hole-1703494.html

BeeCeeBee · Sep 15, 2012

Worth reading by anyone who is just testing W8

Log in or Sign up

Pre-Release Version Of Windows 8 Contains Flash Hole

snoopy Registered Members

BeeCeeBee ADMINISTRATOR IN MEMORY

Share This Page

Log in or Sign up

Pre-Release Version Of Windows 8 Contains Flash Hole

snoopy Registered Members

BeeCeeBee ADMINISTRATOR IN MEMORY

Share This Page

Useful Searches