Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le décembre 14, 2013, 10:14:25

Titre: [SecListe]Adobe Security Updates December 2013 - Fixing CVE-2013-5331 and more
Posté par: igor51 le décembre 14, 2013, 10:14:25

Adobe Security Updates December 2013 - Fixing CVE-2013-5331 and more

This month Adobe's realing fixes for both Flash Player and Shockwave.

The vulnerabilies for Flash Player affect all platforms and concern two CVEs - CVE-2013-5331 and CVE-2013-5332, which both allow for remote code execution. Eploitation of CVE-2013-5331 using Microsoft Word as a leverage mechanism has been observed in the wild. Though Flash 11.6 introduced Click-to-Play for Office, users may still be socially engineered into running Flash content in Office documents. Make sure to apply this patch promptly.

Source: Adobe Security Updates December 2013 - Fixing CVE-2013-5331 and more (http://www.securelist.com/en/blog/208214183/Adobe_Security_Updates_December_2013_Fixing_CVE_2013_5331_and_more)