Uitgavegeschiedenis Flash Player

Adobe heeft een beveiligingsupdate voor zijn Flash Player uitgebracht. Flash 10.2.152.26 dicht dertien beveiligingslekken.

Ook brengt deze nieuwe versie van de Flash plugin ondersteuning voor hardware acceleratie (als u videokaart geschikt is), waardoor veel minder processorkracht nodig is om betere videokwaliteit te tonen. Deze zogeheten Stage Video hardware versnelling kan tot 34 keer efficiënter zijn claimt Adobe. Video-websites als YouTube gaan ook ondersteuning bieden voor Stage Video.

Verdere vernieuwingen zijn onder andere dat sub-pixel text rendering enhancements moeten zorgen voor een betere leesbaarheid van teksten. Lees hier over de verdere veranderingen in Flash 10.2.

Als u meerdere browsers gebruikt, zult u voor elke browser apart de Flash Player moeten updaten (in ieder geval voor Internet Explorer en de andere browsers)! Op deze pagina kunt u controleren voor elke browser welke versie van de plugin u heeft.

Flash Player 10.2.152.26 is te downloaden voor browsers onder Windows, Mac OS X en Linux.

Release notes over beveiligingslekken:

This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-0558).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0559).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0560, CVE-2011-0561).

This update resolves multiple memory corruption vulnerabilities that could lead to code execution (CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574).

This update resolves a library-loading vulnerability that could lead to code execution (CVE-2011-0575).

This update resolves a font-parsing vulnerability that could lead to code execution (CVE-2011-0577).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0578).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0607).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-0608).

Een week eerder dan gepland heeft Adobe een beveiligingsupdate uitgebracht voor het zeer ernstige zero-day-lek in zijn Flash Player. Flash 10.1.85.3 repareert het lek dat al actief misbruikt wordt door internet criminelen en dat vorige week gemeld werd. Gezien de ernst en het feit dat er al aanvallen waren die de kwetsbaarheid in de Flash plugin voor browsers uitbuiten heeft Adobe haast gemaakt met de update.

De nieuwe Flash Player is te krijgen voor Internet Explorer, Firefox, Opera, Safari en andere browsers. Google Chrome - dat Adobes plugin standaard meelevert met zijn browser - kreeg dit weekend al een update met de nieuwe Flash Player.

Als u meerdere browsers gebruikt, zult u voor elke browser afzonderlijk de Flash Player moeten updaten (in ieder geval voor IE en andere browsers)! Op deze pagina kunt u controleren voor elke browser welke versie van de plugin u heeft.

Flash Player 10.1.85.3 is te downloaden voor browsers onder Windows, Mac OS X en Linux. Ook de Android-versie van de plugin kreeg een update naar volgnummer 10.1.95.1. Adobe Reader, dat onder dezelfde kwetsbaarheid gebukt gaat, krijgt in de week van 4 oktober een update.

Release notes:
A critical vulnerability exists in Adobe Flash Player 10.1.82.76 and earlier versions for Windows, Macintosh, Linux, and Solaris, and Adobe Flash Player 10.1.92.10 for Android. This vulnerability also affects Adobe Reader 9.3.4 and earlier versions for Windows, Macintosh and UNIX, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh. This vulnerability (CVE-2010-2884) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against Adobe Flash Player on Windows. Adobe is not aware of any attacks exploiting this vulnerability against Adobe Reader or Acrobat to date.

Voor Adobes Flash is een belangrijke beveiligingsupdate uitgebracht. Hierin worden maar liefst 32 kritieke veiligheidslekken gedicht. Enkele daarvan werden al actief misbruikt door internet criminelen. Flash 10.1.53.64 is een essentiële update dus. De lekken in de Flash component van Adobe Reader worden pas eind juni opgelost.

Behalve veiligheid biedt Flash 10.1 ook nieuwe eigenschappen. Zo belooft Adobe dat de Flash-plugin voor Internet Explorer, Firefox en Google Chrome nu de private browsing mogelijkheden van deze browsers zal respecteren en geen gegegevens zal opslaan tijdens privé sessies. Ook geheugenlekken van de Flash Player moeten nu beter afgehandeld en voorkomen worden, zodat browsers minder snel crashen.

Verder heeft Flash 10.1 een lange lijst aan nieuwe mogelijkheden wat betreft weergave van media, prestaties en veel meer. Deze features kunt u hier nalezen.

Als u meerdere browsers gebruikt, zult u voor elke browser afzonderlijk de Flash Player moeten updaten (in ieder geval IE en andere browsers)! Op deze pagina kunt u controleren voor elke browser welke versie van de plugin u heeft.

Release notes:

Critical vulnerabilities have been identified in Adobe Flash Player version 10.0.45.2 and earlier. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-1297).
Note: There are reports that this issue is being actively exploited in the wild.

This update resolves a memory exhaustion vulnerability that could lead to code execution (CVE-2009-3793).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2160).

This update resolves an indexing vulnerability that could lead to code execution (CVE-2010-2161).

This update resolves a heap corruption vulnerability that could lead to code execution (CVE-2010-2162).

This update resolves multiple vulnerabilities that could lead to code execution (CVE-2010-2163).

This update resolves a use after free vulnerability that could lead to code execution (CVE-2010-2164).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2165).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2166).

This update resolves multiple heap overflow vulnerabilities that could lead to code execution (CVE-2010-2167).

This update resolves a pointer memory corruption that could lead to code execution (CVE-2010-2169).

This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2010-2170).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2171).

This update resolves a denial of service issue on some UNIX platforms (Flash Player 9 only) (CVE-2010-2172).

This update resolves an invalid pointer vulnerability that could lead to code execution (CVE-2010-2173).

This update resolves an invalid pointer vulnerability that could lead to code execution (CVE-2010-2174).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2175).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2176).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2177).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2178).

This update resolves a URL parsing vulnerability that could lead to cross-site scripting (Firefox and Chrome browsers only) (CVE-2010-2179).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2180).

This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2010-2181).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2182).

This update resolves a integer overflow vulnerability that could lead to code execution (CVE-2010-2183).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2184).

This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2010-2185).

This update resolves a denial of service vulnerability that can cause the application to crash. Arbitrary code execution has not been demonstrated, but may be possible. (CVE-2010-2186).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2187).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2188).

This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-2189).
Note: This issue occurs only on VMWare systems with VMWare Tools enabled.

This update resolves a denial of service issue (CVE-2008-4546).

Adobe recommends users of Adobe Flash Player 10.0.45.2 and earlier versions update to Adobe Flash Player 10.1.53.64.

Lees hier over de nieuwe eigenschappen van Flash Player 10.1