• Articles
    • Editorial Articles
    • Research Articles
    • WatchGuard Articles
  • Daily Security Bytes
  • The 443 Podcast
  • Threat Landscape
  • About
    • About Us
    • Contact Us
    • Contribute to Secplicity

Secplicity - Security Simplified

Powered by WatchGuard Technologies

Latest Flash Update Mends Four Flaws

April 9, 2014 By Corey Nachreiner

Summary:

  • This vulnerability affects: Adobe Flash Player running on all platforms and Adobe Air
  • How an attacker exploits it: By enticing users to visit a website containing malicious Flash content
  • Impact: In the worst case, an attacker can execute code on the user’s computer, potentially gaining control of it
  • What to do: Download and install the latest version of Adobe Flash Player for your platform

Exposure:

Adobe Flash Player displays interactive, animated web content called Flash. Although Flash is optional, 99% of PC users download and install it to view multimedia web content. It runs on many operating systems, including mobile operating systems like Android.

This week, Adobe released a security bulletin describing four security vulnerabilities (based on CVE numbers) that affect Flash Player running on any platform. It doesn’t describe the flaws in much technical detail, other than saying they consist mostly of buffer overflow vulnerabilities and other types of memory corruption flaws (and a cross-site scripting issue). That said, Adobe does warn that if an attacker can entice one of your users to visit a malicious website containing specially crafted Flash content, he could exploit many of these unspecified vulnerabilities to execute code on that user’s computer, with that user’s privileges. If your Windows users have local administrator privileges, an attacker could exploit this flaw to gain full control of their PCs.

Though it doesn’t look like attackers are exploiting these flaws in the wild yet, Adobe rates the flaws as a “Priority 1” issues for Windows and Macintosh users, and recommends you apply the updates within 72 hours. These vulnerabilities also affect other platforms as well, such as Internet Explorer (IE) 11 and Chrome. I recommend you update any Flash capable platform as soon as you can.

Solution Path

Adobe has released new versions of Flash Player to fix these issues. If you allow Adobe Flash in your network, you should download and install the new versions immediately. If you’ve enabled Flash Player’s recent “silent update” option, you will receive this update automatically.

You can download Flash for your computer at the link provided below. See the bulletin’s “Affected Software” section for more details on getting Flash updates for other platforms:

Keep in mind, if you use Google Chrome or IE 11, you’ll have to update it seperately.

For All WatchGuard Users:

Good News! WatchGuard’s Gateway Antivirus and Intrusion Prevention services can often prevent these sorts of attacks, or the malware they try to distribute. For instance, our IPS signature team has developed signatures that can detect and block many of the memory corruption vulnerabilities described in Adobe’s alert:

  • WEB  Adobe Flash Player High Surrogate Parsing Cross Site Scripting  (CVE-2014-0509)
  • WEB-CLIENT Adobe Flash Player Information Disclosure (CVE-2014-0508)
  • EXPLOIT Adobe Flash Player Memory Corruption (CVE-2014-0506)
  • EXPLOIT Adobe Flash Player Memory Corruption (CVE-2014-0507)

Your XTM appliance should get this new IPS update shortly.

Furthermore, our Reputation Enabled Defense (RED) and WebBlocker services can often prevent your users from accidentally visiting malicious (or legitimate but booby-trapped) web sites that contain these sorts of attacks. Nonetheless, we still recommend you install Adobe’s Flash update to completely protect yourself from all of these flaws.

Status:

Adobe has released updates to fix these Flash vulnerabilities.

References:

  • April 2014 Adobe Flash Security Bulletin

This alert was researched and written by Corey Nachreiner, CISSP (@SecAdept)

Share This:

Related

Filed Under: Security Bytes Tagged With: Adobe, Remote code execution (RSE), Updates and patches

Comments

  1. James says

    April 10, 2014 at 6:39 am

    How does this impact systems running Windows 8 since Flash is integrated into the OS and is not a separate install?

    Reply
  2. seo says

    June 20, 2014 at 6:18 pm

    The frustration lies within many online marketers of the multiple
    and maybe even unnecessary changes the search engines make to their so called “algorithm” and YES I will agree I have shared these frustrations.
    Directories-Directories like Yellowpages, Foursquare, and Yelp can actually place you quite high on the search engine.

    With online businesses, it’s very important to have good uptime,
    which means no downtime.

    Reply
  3. homepage says

    July 21, 2014 at 9:57 am

    Nice weblog right here! Additionally your web site a lot up fast!
    What web host are you the usage of? Can I am getting your associate hyperlink to your host?
    I wish my website loaded up as fast as yours lol

    Reply
  4. making a blog says

    August 4, 2014 at 9:01 am

    I’m really enjoying the design and layout of your blog. It’s a very easy on the eyes which makes it much more enjoyable for me to come
    here and visit more often. Did you hire out a designer to create your theme?
    Outstanding work!

    Reply
  5. faire weblog says

    August 5, 2014 at 2:26 pm

    Hello, i think that i noticed you visited my site so
    i came to return the choose?.I’m trying to to find issues to improve my website!I guess its adequate to make use of some of
    your ideas!!

    Reply
  6. the carpet cleaner says

    August 17, 2014 at 10:39 am

    When someone writes an post he/she retains the plan of a user in his/her mind that how a user can know it.
    Thus that’s why this post is outstdanding. Thanks!

    Reply
  7. blog site says

    August 24, 2014 at 4:26 am

    Yesterday, while I was at work, my sister stole my iphone and tested to see if
    it can survive a twenty five foot drop, just so she can be a youtube sensation. My iPad is now
    broken and she has 83 views. I know this is totally off topic but I had to share it with someone!

    Reply
  8. rubber roofing installation says

    August 31, 2014 at 3:45 am

    Hello, i believe that i noticed you visited my web site thus i came to go
    back the prefer?.I’m trying to in finding things to improve my web site!I guess its adequate to make use of
    some of your ideas!!

    Reply
  9. article spinning works says

    September 1, 2014 at 10:11 am

    Wοѡ, thiѕ ρiece of writing is nice, my sister is analyzing
    such things, so I am going tο inform ɦer.

    Reply
  10. collinslwvm.wordpress.com says

    September 11, 2014 at 10:44 pm

    This is really interesting, You are a very skilled blogger.
    I have joined your rss feed and look forward
    to seeking more of your magnificent post.
    Also, I have shared your website in my social networks!

    Reply
  11. cost to install roof says

    September 12, 2014 at 12:24 pm

    This excellent website certainly has all of the info I wanted concerning this subject and didn’t
    know who to ask.

    Reply
  12. comptoir quartz ou granit Quebec says

    September 23, 2014 at 12:00 pm

    I was recommended this blog by my cousin. I’m not sure whether this post is written by him as nobody else know such detailed about my trouble.
    You are incredible! Thanks!

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

The 443 Podcast

A weekly podcast featuring the leading white-hat hackers and security researchers. Listen Now
the 443 podcast

Threat Landscape

Filter and view Firebox Feed data by type of attack, region, country, and date range. View Now
threat landscape

Top Posts

  • USA’s Answer to GDPR
  • Rolling PWN
  • Hacker Summer Camp 2022

Email Newsletter

Sign up to get the latest security news and threat analysis delivered straight to your inbox

By signing up you agree to our Privacy Policy.


The views and opinions expressed on this website are those of the authors and do not necessarily reflect the policy or position of WatchGuard Technologies.

Stay in Touch

Recent Posts

  • Hacker Summer Camp 2022
  • Private Sector Offensive Actors
  • USA’s Answer to GDPR
  • Rolling PWN
  • Over a Billion Records Leaked in Shanghai National Police Database Hack
View All

Search

Archives

Copyright © 2022 WatchGuard Technologies · Cookie Policy · Privacy Policy · Terms of Use