PDA

View Full Version : Adobe Flash update (yes, that includes you, Mr Vulcanised !)


mixture
9th Feb 2014, 16:18
No doubt our Mr V (and others) have been recently "nagged" to update their Adobe Flash.

The short answer to this one is YES YOU MUST.

There is a rather nasty zero day attack out there that hides itself in Excel files, Word files and innocent looking images of hearts. The exploit gives people remote control of your computer and also harvests passwords whenever you login to stuff.

If you are not running flash 12.0.0.44 or later, you are vulnerable.

This is a cross-platform exploit... Windows, Mac & Linux all need to be patched up.

Go here (http://helpx.adobe.com/flash-player.html) on the Adobe website to figure out what version of Flash you have and find a link to an update.

For those of you who want the technical nitty gritty, this one was discovered by Kaspersky, so details can be found on their blog here (http://www.securelist.com/en/blog/8177/CVE_2014_0497_a_0_day_vulnerability).

vulcanised
9th Feb 2014, 16:28
Thanks for the personal message http://images.ibsrv.net/ibsrv/res/src:www.pprune.org/get/images/smilies/tongue.gif

mixture
9th Feb 2014, 16:37
Pleasure. :cool:

To be honest, I was going to post about it on the day the exploit came out last week as it was such a big one. But then I decided to stick to my normal policy that if we all posted "heads-up" messages about exploits and security updates, it would be a bit like trying to get a word in sideways on a busy radio frequency.

The other half of that policy being (if you hadn't guessed already) that people should be updating unless they have very good reason not to (few do). Its a bit like asking if its a good idea to check the tyre pressures on your car....

Mac the Knife
9th Feb 2014, 18:53
Of course we should all be updating our apps regularly but I have so many around the place that it's hard to remember, particularly if it is one you don't use very often.

Ninite is a good reminder for common apps: Ninite - Install or Update Multiple Apps at Once (http://ninite.com/)

But in thinking about it I discovered a wonderful command line utility that I never knew Windows had!

forfiles

Check it out from the console!

Oooooh - I wish I'd had that in the days when I was constructing improbable batch files to do things that you're not supposed to be able to do!

Nowadays we have PowerShell and my darling Python to do the heavy lifting thank heavens.

Mac (old fart)

:ouch:

vulcanised
9th Feb 2014, 20:30
mixture, are you aware that flash update brings down McAfee Security Scan with it? I didn't see any option, it just downloaded and installed itself.

McAfee being as welcome as a fart in a space suit here, I removed it (hopefully) via control panel, but not before getting three warnings from ZA that it was trying to make further installations.

Mac the Knife
9th Feb 2014, 20:37
It does ask you if you want to install McAfee Security Scan but it's a little tiny un-tick box that is easily missed.:*

Sneaky **** from Adobe (and a backhander from McStuffup):yuk:

Be very careful when installing apps downloaded from the web - there is not infrequently a half-hidden un-tick box that will add-on some insecure bit of bloatware or a system bomb like McAfee.

Mac

:ooh:

mixture
10th Feb 2014, 07:16
mixture, are you aware that flash update brings down McAfee Security Scan with it? I didn't see any option, it just downloaded and installed itself.

It doesn't on a Mac :E

It also doesn't if you've signed a Distribution License Agreement and have access to different binaries.

But for everyone else who doesn't have a Mac or is stuck with the standard version of the installer, as MtK pointed out, it asks you... you just need to look out for the tick box. Instead of going next next next next install.

cattletruck
10th Feb 2014, 11:20
Thanks for the heads up mixture :ok:

Those of you who have computers that are rarely connected to the internet or are limited by bandwith/network costs may want to load the flash player as an installable file rather than use Adobe's crappy online wizard for each computer.

Link here: Adobe Flash Player Distribution | Adobe (http://www.adobe.com/products/flashplayer/distribution3.html)

Experience has shown with Adobe that these links may not exist after 12 months. The online Flash install wizard has never worked on my computer for donkeys years so I may be around next year with an updated link.

occasional
11th Feb 2014, 08:11
There is also, apparently, a virus around that installs itself from an Adobe update pop-up box, so do NOT use the pop-up box to update.

The update also appears to be unbelievably slow - took over an hour on this machine.

Sunnyjohn
11th Feb 2014, 11:07
Of course we should all be updating our apps regularly but I have so many around the place that it's hard to remember All my apps have an automatic update alert and some update automatically; there are check boxes on the app page to give you those options. I am talking Mac, though. Maybe you don't have that facility on a p.c.?

Pelikal
11th Feb 2014, 19:45
Yup, thanks for heads up. Did miss the little tick box though.:ugh:

Loose rivets
11th Feb 2014, 20:46
Now I wish I hadn't read this thread. Boody Flash Player. I started a thread a while back asking what the box was that stuck itself in front of a viewed item, asking for permission to load stuff every time. Without it I couldn't.

It came back with a vengeance the other day, and finally I got an offer to update and it seem to work just fine, obviating the need for them to stick the #@%@2 box in.

I watched loads of stuff - just fine.

Upon seeing this thread, I went to check what version I'd got. Nowhere can I find a trace or hint of it. I have three logical drives, and for some reason a Program files folder has established itself in both C and D. Adobe is in both of them, but not flash player. Searching - nothing. WhereTFlippin' 'ek does it live? And what's a good test to prove I've got it, like Youtube, do you need it for that to work? One lives in a constant state of bewilderment these days.

Helix Von Smelix
11th Feb 2014, 22:27
Control Panel :ok: Mr Rivets

Loose rivets
12th Feb 2014, 02:15
What's it doing hiding in there?

Thanks. :ok: