+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [WARNING] Minor security flaws in Adobe Flash Player [UPDATE TO 12.0.0.77] (/showthread.php?tid=4110268)
Pages: Pages
1
2
[WARNING] Minor security flaws in Adobe Flash Player [UPDATE TO 12.0.0.77] - Null Byte - Mar 11, 2014
[img]http://wwwimages.adobe.com/www.adobe.com/downloadcenter/singlepage/live/images/flash_windows.gif[/img]
Alert for: Adobe Flash Player users below version 12.0.0.77
Vulnerabilities: CVE-2014-0503 and CVE-2014-0504
Update: http://get.adobe.com/flashplayer/
Information:
Adobe has released security updates to address important vulnerabilities in Adobe Flash Player 12.0.0.70 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.341 and earlier versions for Linux.
The new build intends to address following vulnerabilities in Adobe Flash Player:
- CVE-2014-0503, reported by security researcher, 'Masato Kinugawa', that lets attackers bypass the same-origin policy. Attackers can exploit this issue to access resources from another origin in the context of another domain. This can facilitate cross-site request-forgery attacks.
- CVE-2014-0504, reported by 'Jordan Milne', that could be used to read the contents of the clipboard(). The Clipboard can be used to store data, such as text and images, but flaw could allow hacker to stuff malware URLs onto your clipboard.
Source: http://thehackernews.com/2014/03/adobe-releases-important-security.html
* - Hidden™ - Mar 11, 2014
Good thing I am still using the 2011 version then!
* - xhflhkeuhwguu34 - Mar 11, 2014
I have a fix for Flash that prevents every exploit on it.
- Download this and save it to your Desktop.
- Double click it.
- Proceed with the uninstaller.
* - Null Byte - Mar 11, 2014
(Mar 11, 2014 09:53 PM)Xen0n Wrote: I have a fix for Flash that prevents every exploit on it.
- Download this and save it to your Desktop.
- Double click it.
- Proceed with the uninstaller.
Make a thread with this guide, surely it will be stickied.
* - Jagster™ - Mar 12, 2014
Yah seriously, if my movie streaming habits would let me I would have removed Flash Player ages ago. At least they have auto-updater 🤫
* - DpzFAsq4UEK8 - Mar 13, 2014
(Mar 11, 2014 09:53 PM)Xen0n Wrote: I have a fix for Flash that prevents every exploit on it.
- Download this and save it to your Desktop.
- Double click it.
- Proceed with the uninstaller.
Yeah, this piece of shit Flash Player needs to be dead. I hope that HTML5 will fully replace Flash in the future.
* - Aura - Mar 13, 2014
(Mar 13, 2014 12:58 AM)Arrhythmia Wrote: Yeah, this piece of shit Flash Player needs to be dead. I hope that HTML5 will fully replace Flash in the future.
It's in the process, but for now, many websites still uses Adobe Flash Player and are not fully converted to HTML5 yet.
* - He B TeMy - Mar 13, 2014
What's that hate towards Flash player? lol.
* - Aura - Mar 13, 2014
(Mar 13, 2014 07:16 PM)HeBTeMy Wrote: What's that hate towards Flash player? lol.
The fact that there's a security flaw in it every week. Not a minor one, one that can allow total remote control of the system, lol.
* - DpzFAsq4UEK8 - Mar 14, 2014
(Mar 13, 2014 07:20 PM)Aurа Wrote: The fact that there's a security flaw in it every week. Not a minor one, one that can allow total remote control of the system, lol.
This.
And the fact that the Linux versions of it are buggy as hell, and Adobe stopped caring about Linux. No updates are being released, just security fixes. And hardware acceleration is glitchy on open-source GPU drivers.
With this addon, most YouTube videos play without Flash: https://addons.mozilla.org/pl/firefox/addon/youtube-all-html5/
* - Aura - Mar 14, 2014
(Mar 14, 2014 12:30 AM)Arrhythmia Wrote: This.
And the fact that the Linux versions of it are buggy as hell, and Adobe stopped caring about Linux. No updates are being released, just security fixes. And hardware acceleration is glitchy on open-source GPU drivers.
With this addon, most YouTube videos play without Flash: https://addons.mozilla.org/pl/firefox/addon/youtube-all-html5/
Many browsers includes their own version of Flash I guess, so you don't have to install it directly on your system. People that install it on HackForums are mostly people doing eWhoring and using VCW as it required Flash Player to be installed in order to use it with ManyCam.
* - DpzFAsq4UEK8 - Mar 14, 2014
I'm not going to use Google Chrome just to have an up-to-date version of Flash.
* - Aura - Mar 14, 2014
(Mar 14, 2014 04:37 AM)Arrhythmia Wrote: I'm not going to use Google Chrome just to have an up-to-date version of Flash.
What do you have against Google's botnet ? 🤫
* - Jagster™ - Mar 14, 2014
(Mar 14, 2014 05:20 AM)Aurа Wrote: What do you have against Google's botnet ? 🤫
The fact that I can't mine on its slaves is one (if I could maybe then you could remove my PS .dll's) 😏
Other than that I love chome, I am not doing anything to grab the attention of authorities or anything that is worth their time.
* - Aura - Mar 14, 2014
(Mar 14, 2014 01:03 PM)Jagster Wrote: The fact that I can't mine on its slaves is one (if I could maybe then you could remove my PS .dll's) 😏
Other than that I love chome, I am not doing anything to grab the attention of authorities or anything that is worth their time.
This mostly. If you don't do anything illegal, you don't care about the botnet 🤣