{"id":418,"date":"2017-07-11T19:10:52","date_gmt":"2017-07-11T19:10:52","guid":{"rendered":"https:\/\/eset-blog.aist.fun\/adobe-flash-player-users-should-update-their-software-now\/"},"modified":"2019-05-29T12:04:56","modified_gmt":"2019-05-29T12:04:56","slug":"adobe-flash-player-users-should-update-their-software-now","status":"publish","type":"post","link":"https:\/\/blog.eset.ee\/et\/en\/2017\/07\/11\/adobe-flash-player-users-should-update-their-software-now\/","title":{"rendered":"Adobe Flash Player users should update their software NOW"},"content":{"rendered":"<p class=\"wls-paragraph\">One of the favourite pieces of software for malicious hackers to target on users\u2019 computers is Adobe Flash Player.<\/p>\n<p class=\"wls-paragraph\">Why? Well, there are a few reasons.<\/p>\n<p class=\"wls-paragraph\">Firstly, Adobe Flash Player is on an awful lot of computers. Many users may have installed it long ago in order to access Flash-based media content online, such as videos. Malicious hackers can rely upon a large number of people having Flash installed, making it a target for attack.<\/p>\n<p class=\"wls-paragraph\">Secondly, the version of Adobe Flash Player installed on your computer may be out-of-date. Users may have failed to configure updates properly, or chosen to ignore reminders to update the software promptly when a new security update is released. There\u2019s only one thing more attractive to a malicious hacker than widely-used ubiquitous software, and that\u2019s widely-used ubiquitous software that hasn\u2019t been kept updated with the latest patches.<\/p>\n<p class=\"wls-paragraph\">It doesn\u2019t matter if a hacker doesn\u2019t have a&nbsp;zero-day exploit to throw at your Adobe Flash Player if you haven\u2019t been bothering to keep it protected against known vulnerabilities.<\/p>\n<p class=\"wls-paragraph\">Thirdly, there has been a long history of malicious hackers finding critical security holes in Adobe Flash Player, and building their attacks into exploit kits for anyone to deploy. Flash is closed, proprietary software controlled by Adobe and it has been plagued with software vulnerabilities and serious flaws over many years. Quite why Flash has been targeted so often is open to some debate, but the mere fact that it has suggests that it will continue to be for some time to come.<\/p>\n<p class=\"wls-paragraph\">The upshot of this is that when Adobe releases new security patches for Adobe Flash Player, it would be very sensible indeed for its users to sit up and take notice.<\/p>\n<p class=\"wls-paragraph\">Earlier today Adobe issued a <a title=\"Link to Adobe security advisory\" href=\"https:\/\/helpx.adobe.com\/security\/products\/flash-player\/apsb17-21.html\" rel=\"nofollow\">security advisory<\/a> detailing updates it has released for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS.<\/p>\n<p class=\"wls-paragraph\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-96986\" src=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2017\/07\/flash-vulns.jpeg\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" srcset=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2017\/07\/flash-vulns.jpeg 600w, https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2017\/07\/flash-vulns-300x213.jpeg 300w\" alt=\"\" width=\"600\" height=\"426\"><\/p>\n<p class=\"wls-paragraph\">The updates are said to address critical vulnerabilities that could allow an attacker to&nbsp;penetrate a vulnerable system, allowing a remote attacker to execute code on a victim\u2019s computer and take control over the device.<\/p>\n<p class=\"wls-paragraph\">Adobe recommends that users of the Adobe Flash Player Desktop Runtime for Windows, Macintosh and Linux update to Adobe Flash Player version 26.0.0.137 as soon as possible. You can do this either by visiting the <a title=\"Link to Adobe Flash Player download\" href=\"https:\/\/get.adobe.com\/flashplayer\/\" rel=\"nofollow\">official Adobe Flash Player download page<\/a>, or ensuring that Flash\u2019s global settings are set to \u201cinstall updates automatically when available\u201d.<\/p>\n<p class=\"wls-paragraph\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-96982\" src=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2017\/07\/12-flash-settings.jpeg\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" srcset=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2017\/07\/12-flash-settings.jpeg 600w, https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2017\/07\/12-flash-settings-300x105.jpeg 300w\" alt=\"\" width=\"600\" height=\"209\"><\/p>\n<p class=\"wls-paragraph\">Even with that option enabled you may be disappointed to find that security updates are not immediately available to you, and \u2013 rather than wait \u2013 prefer to manually force an update instead.<\/p>\n<p class=\"wls-paragraph\">Things are a little simpler for those who rely upon the Adobe Flash Player code integrated with the Google Chrome and Microsoft Edge browsers, as they should be automatically updated to the latest version as the browser itself updates.<\/p>\n<p class=\"wls-paragraph\">The best approach of all, of course, if you want to permanently secure your computers and devices against Flash flaws is the nuclear option: <a href=\"https:\/\/www.grahamcluley.com\/update-adobe-flash-uninstall-completely\/\">uninstall Flash from your computer<\/a>. Or \u2013 if you just need Adobe Flash for very specific websites or bespoke applications \u2013 have Flash installed on an alternative browser rather than the one you regularly use to surf the web.<\/p>\n<p class=\"wls-paragraph\">If you\u2019re not quite ready to take the step of entirely uninstalling Flash, then you should at the very least consider <a href=\"https:\/\/www.grahamcluley.com\/2015\/06\/enable-click-play-adobe-flash\/\">enabling \u201cClick to Play\u201d<\/a>, which stops Flash elements from being rendered in your browser unless you give specific permission.<\/p>\n<p>Source: <a href=\"https:\/\/www.welivesecurity.com\/2017\/07\/11\/adobe-flash-player-users-update-software-now\/\"><strong>WeLiveSecurity<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of the favourite pieces of software for malicious hackers to target on users\u2019 computers is Adobe Flash Player. Why? Well, there are a few reasons. Firstly, Adobe Flash Player is on an awful lot of computers. Many users may have installed it long ago in order to access Flash-based media content online, such as [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":1819,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2879,2905,2902,162,167],"tags":[],"class_list":["post-418","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business-security","category-devices","category-home-family","category-news","category-privacy"],"acf":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts\/418","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/comments?post=418"}],"version-history":[{"count":0,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts\/418\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/media\/1819"}],"wp:attachment":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/media?parent=418"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/categories?post=418"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/tags?post=418"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}