Slashdot Mirror


New Zero-Day Flash Bug Affects Windows, OS X, and Linux Computers

An anonymous reader writes "Researchers at the Kaspersky Lab have uncovered a zero-day Adobe Flash vulnerability that affects Windows, OS X, and Linux. 'While the exploit Kaspersky observed attacked only computers running Microsoft Windows, the underlying flaw, which is formally categorized as CVE-2014-1776 and resides in a Flash component known as the Pixel Bender, is present in the Adobe application built for OS X and Linux machines as well.' Adobe has reportedly patched the bug for all platforms. Researchers first detected the bug from attacks performed on seven Syrian computers. The attacks seem to have been hosted on the Syrian Ministry of Justice website, which has led to speculation that these are state-sponsored vulnerability exploits. This speculation is further supported by evidence that one of the exploits was 'designed to target computers that have the Cisco Systems MeetingPlace Express Add-In version 5x0 installed. The app is used to view documents and images during Web conferences.'"

3 of 178 comments (clear)

  1. Long story short by Anonymous Coward · · Score: 5, Insightful

    flash is equally bad on all platforms web guys please stop using it.

    1. Re:Long story short by powerlord · · Score: 5, Funny

      flash is equally bad on all platforms web guys please stop using it.

      Hey ... look at the upside, feature parity across Windows, OSX and Linux ... even for bugs and exploits.

      --
      This space for rent. All reasonable inquiries will be entertained at proprietors discretion.