Adobe has just released a new version of it Flash Player. The new Flash Player 22.0.0.192 fixes 36 security issues, including a zero-day that is currently being used in attacks.
The vulnerability was discovered by Kaspersky Labs and expert Costin Raiu reported that the hackers χρησιμοποίησαν το Flash zero-day για να προκαλέσουν ένα memory corruption bug στη μνήμη του Flash Player, κάτι το οποίο τους επέτρεψε να εκτελέσουν κακόβουλο κώδικα στον υπολογιστή του θύματος και να αναλάβουν την διαχείριση της συσκευής.
In addition to zero-day (CVE-2016-4171), the company also corrected other Flash exploits such as CVE-2016-4117 and CVE-2016-0147. The last one was another zero-day exploit that Adobe reported had been repaired in April.
Updates are currently available for all three platforms: Windows, Mac και Linux. Η ενημερωμένη έκδοση του Adobe Flash Ρlayer για Windows και Mac είναι η 22.0.0.192, ενώ για τις διανομές Linux είναι η 11.2.202.626.