Because of this, it may be easier to exploit a vulnerability when Flash is hosted by Shockwave, for example."Īdobe spokeswoman Heather Edell confirmed that CERT's information is correct, and that the next release of Shockwave Player will include the updated version of Flash Player.
In the case of Shockwave, there are some mitigations missing in a number of modules, such as SafeSEH. "One of the things that helps make a vulnerability more difficult is how many of the exploit mitigations a vendor opts in to. "So not only are the vulnerabilities there, but they're easier to exploit as well," Dormann said. That's because Shockwave has several modules that don't opt in to trivial exploit mitigation techniques built into Microsoft Windows, such as SafeSEH. PS: I'm not sure I posted this on the right board.Dormann said he initially alerted the public to this gaping security hole in 2012 via this advisory, but that he first told Adobe about this lacklustre update process back in 2010.Īs if that weren't bad enough, Dormann said it may actually be easier for attackers to exploit Flash vulnerabilities via Shockwave than it is to exploit them directly against the stand-alone Flash plug-in itself. Also why am I not getting updates for the Adobe Shockwave Player or do I have the latest ? My question : Should I be getting updates for Shockwave Player, and am I right to ignore the Adobe Flash player updates that seem legitimate. Maybe it was from Microsoft but I Xed out the warning quickly so I'm not sure where the warning came from. I don't believe this was from My Norton Internet Security as it wasn't so marked and it didn't popup in the right corner of my taskbar as Norton warnings do but filled the whole page. With one of these popups a warning came on that this was a malicious site and not to update. However, I noticed I have been getting Windows security updates for the Adobe Flash Player, which is not installed on my computer but no security updates for the Adobe Shock wave player.Īlso I've been getting every so often here lately popup requests to update the Flash Player which I don't have.
The Adobe Shockwave Player 12, version 12.1.7.157 is listed in the Progams section of the Control panel and I understand from some reading I've done that you don't need both the Adobe Flash Player and Shockwave player as the Shockwave is used more for gaming computers. I understand this computer is good for gaming, although I haven't used it much for gaming. This April I purchased the following noitebook computer: HP Envy M7- N109DX Notebook.
0 kommentar(er)
