Adobe has announced another security advisory for Flash on Android, affecting all builds, including the current version of 10.1.95.2. Additionally, the same advisory goes out to users on Windows, Mac, Solaris, and Linux for builds up to and including 10.1.85.3, and for Acrobat and Reader 9.4.
According to Adobe, "This vulnerability (CVE-2010-3654) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild against Adobe Reader and Acrobat 9.x. Adobe is not currently aware of attacks targeting Adobe Flash Player."
Adobe says it is already in the process of finalizing the fix, and will have it rolled out by Nov 9. Should any real exploits for Flash on Android surface, we'll let you know. [Adobe via PC Mag] Thanks evoinmypalm for the tip!
- Filed under: