[Info]Adobe Shockwave Lugging Around Hobbled, Vulnerable Version of Flash

[Chapitre23]

Bonjour,

It’s bad enough that the Flash runtime bundled with Adobe’s Shockwave player is deficient in security patches going back to January 2013, but what’s worse is that the increased attack surface provided by Shockwave might make it easier to exploit. And, in the bargain, Adobe has known about the issue since October 2010.

Lire la suite sur Threatpost