Flash Player 15.0.0.152

Door redactie op 10 september 2014 - 10:09

In navolging van Microsoft heeft Adobe een maandelijkse patch tuesday (pleister dinsdag) ingesteld voor zijn Flash Player. Op deze dag verschijnen elke maand beveiligingsupdates voor de veelgebruikte Flash-plugin.

Gisteravond heeft Adobe Flash 15.0.0.152 vrijgegeven. Deze versie van de plugin plakt twaalf ernstige beveiligingslekken dicht. Acht van deze kwetsbaarheden zijn overigens ontdekt door Google-medewerkers. De meeste gaten betreffen geheugenlekken en geheugencorrupties. In het ergste geval kunnen kwaadwillenden de controle over een getroffen pc overnemen door misbruik te maken van deze lekken. Snel updaten voor al je browsers is dus gewenst!

Behalve het dichtplakken van lekken brengt deze uitgave van Flash ook enkele verbeteringen en vernieuwingen. Zo werkt zoomen in Internet Explorer beter en wordt op Windows-tablets Flash-inhoud geschaald afhankelijk van de oriëntatie (staand of liggend) van het apparaat. De ingebouwde Flash-plugin in Google Chrome maakt nu gebruik van hardware video decoding waardoor er minder processorkracht nodig is voor de weergave van Flash-filmpjes en dergelijke.

Verder worden in deze versie van Flash enkele wijzigingen voor ontwikkelaars doorgevoerd en een lijstje met fouten gerepareerd.

Op deze pagina kun je - voor elke browser - controleren welke versie van de plugin je hebt.

Flash Player kun je los downloaden voor Internet Explorer (onder Windows XP, Vista of 7), Safari voor Mac en Firefox en Opera voor Windows, Mac of Linux. Ook kun je updaten via de automatische updater. Flash wordt standaard meegeleverd - en automatisch bijgewerkt - in Google Chrome. Voor Internet Explorer onder Windows 8 en 8.1 wordt Flash geactualiseerd via Windows Update.

Let op! Haal op de website van Flash het vinkje weg bij McAfee Security Scan Plus, Google Chrome of andere optionele software en klik op Nu installeren

Release notes:

These updates resolve memory leakage vulnerabilities that could be used to bypass memory address randomization (CVE-2014-0557).

These updates resolve a security bypass vulnerability (CVE-2014-0554).

These updates resolve a use-after-free vulnerability that could lead to code execution (CVE-2014-0553).

These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0555).

These updates resolve a vulnerability that could be used to bypass the same origin policy (CVE-2014-0548).

These updates resolve a heap buffer overflow vulnerability that could lead to code execution (CVE-2014-0556, CVE-2014-0559)

New Features for Flash Player 15:

Relaxing Stage3D Render Target Clear

In previous versions of Stage3D, after switching the render texture through Context3D::setRenderToTexture, you were required to clear it before drawing. In this release, we're removing this limitation and optimizing the use of render textures. This change will allow you to further optimize and reuse depth and stencil buffers between different render textures. For additional information, please see Relaxing Render Target Clear Operation in Stage 3D.

Improved support for browser zoom levels - Windows 8

Flash Player now has improved support for browser zoom factors other than 100% on Internet Explorer on Windows 8.x. Devices, like the Microsoft Surface tablets, default to a zoom level of 150%. In the past, this could cause problems with Flash Player and some 3D content. With our new implementation, we can now scale the content and 3D buffers to keep everything aligned. In addition, Flash Player introduces an option to render to an increased Stage3D back buffer, rather than scaling, on browser zoom to keep the resolution of the rendered content high. This option allows to the stage3D buffer to change in size in synch with the change in the browser zoom factor. Developers are notified of this change with a new ZOOM_FACTOR_CHANGE event.

Flash Player Fullscreen Orientation Change - Windows

Flash Player will now detect and appropriately scale your content to fit best in a fullscreen display when your device orientation is changed. This change is specific to Windows and is implemented across all browsers. We're focusing on providing the best tablet experience possible. A resize event will fire when in fullscreen mode and the device orientation changes. Developers, if your content does not resize, you will need to handle the resize event appropriately. Additional details will be made available in a separate blog post. For additional details, please see the Guide for Supporting Screen Orientation with Full-Screen Flash Player Content.

Hardware video decoding on Chrome (PPAPI) for Windows

We're pleased to announce that hardware video decoding is now enabled by default for Chrome users on Windows. This feature will drastically reduce the CPU usage and improve performance on supported videos players. We're working closely with Google to bring this feature to OS X and will provide additional details when available.

Automatic software fall back with StageVideo

Flash Player 15 now supports a Software version of StageVideo that provides an automatic failover to the software version when hardware StageVideo is not available. To leverage this automatic failover, the swf apps need to be compiled for Flash Player 15 and above.

When the swfs are compiled for Flash Player 15 and above, and when hardware StageVideo is unavailable, the app will get a StageVideoAvailability event as earlier, but instead of being "Unavailable" it will ALWAYS be "available", and the reason will always be "noError". The app will no longer need to implement a Video object failover as the failover is automatic inside flash player. The apps can still choose to use Video object instead of StageVIdeo if needed.

Hardware StageVideo availability is dependent on a number of factors, including:

Browser hardware rendering support: If available, all wMode based apps will support hardware StageVideo. If not available, wMode=direct based apps will be the only ones that will support hardware StageVideo, unless there are other exceptions, like the ones mentioned below.

IE11: IE has an accelerated pipeline and the FlashPlayer is HW accelerated in all wmode, so StageVideo should always be available. Note that the decision to use the HW accelerate rendering pipeline reside in IE.

Firefox: There is currently no HW accelerated pipeline available in Firefox on windows and only wMode direct will have StageVideo available all other wMode should generate a unavailable event.

Chrome: Pepper has HW acceleration in all wMode, but some restrictions apply. For example Chrome will refuse to use HW acceleration on Windows XP and it has its own driver blacklisting mechanism. It is also possible for the user to disable the HW acceleration in the settings panel. Chrome exposes a somewhat useful page to allow one to see the status of its gpu acceleration: chrome://gpu/

On Mac:

Safari: All wMode should expose StageVideo

Firefox: All wModes should expose StageVideo

Chrome: All wMode should expose StageVideo, with the same limitations as the windows version.

Driver version: Certain older drivers may not support hardware StageVideo

User settings: If a user turns off hardware acceleration, then hardware StageVideo will not be available

Full Screen: Hardware StageVIdeo is always available in Full Screen mode.

When the hardware StageVideo fails because of browser support, wMode, driver version or user settings, starting with Flash Player 15, SW StageVideo will be used automatically without needing any configuration or code in the app.

For complete information please see our release notes.

Download:

Download Flash Player

Bron:

Forum
Security Bulletin
Release Notes

Naam	Cijfer
Adobe Acrobat Reader DC	74
Java	73

Flash Player 15.0.0.152

Reageren

Plain text

Colofon

Volgen

Missie