Adobe Flash security hole

As we all now, there's a huge security hole in flash. It's not a question, what to upgrade urgently in 32-bit systems, but the crap company Adobe didn't provide us a 64bit version of this new flash beta. The question is: In 64bit systems wouldn't it be better to package the nspluginwrappered nonsecholed version of flash? Or would it be too difficult, and it would even need a wiki entry? And from about when will be secure packages of flash will be available from arch repositories?

berbae wrote:It's not clear to me why nspluginwrapper would be needed, because there is in AUR the package lib32-flashplugin-prerelease 10.1.53.64-8, which has less dependencies.
Cannot that package work on x86_64 arch without nspluginwrapper, if all the needed lib32 libraries are installed ?
Please can someone give me explanations, thanks.
Already try that one. In short: it doesn't work.
Apparently, 64bit Firefox could not recognize 32bit plugin, even if all the necessary lib32 packages are installed, which is why we need nspluginwrapper to act as a "middle man" between Firefox and Flash (someone please correct me if I'm wrong on this).
Anyway, don't let the huge dependency list scares you, both nspluginwrapper-debian and nspluginwrapper-flash-prerelease combined requires roughly the same dependencies as lib32-flashplugin, it's just that PKGBUILD of nspluginwrapper-debian listed all dependencies, while lib32-flashplugin only list the highest level ones.
If you don't believe me, try issuing the following command (which is the dependencies of lib32-flashplugin):
lib32-libxt lib32-gtk2 lib32-nss lib32-curl
and take note that it pulls in roughly the same number of packages that nspluginwrapper-debian package requires.
Last edited by zodmaner (2010-06-14 11:31:44)

Similar Messages

Adobe Flash security exposure in HP Solution Center Digital Imaging code

I have an HP Officejet 4500 with the HP Solution Center installed.
Windows XP.
My security software identifies "Adobe Flash Player Multiple Vulnerabilities" embedded in the HP Digital Imaging product.
The versions and locations are:
Adobe Flash 10.0 r2
C:\Program Files\HP\Digital Imaging\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}\setup\hwsetupwizard\setup_guide.exe
Adobe Flash 9.0 r115
C:\Program Files\HP\Digital Imaging\Help\player\FlashPla.exe
Apparently the Digital Imaging products uses these for help and setup functions. They were likely installed initially but I can't find any way to update them. I have tried all update functions available for the Solution Center.
Adobe Flash player is at version 11 as the standalone product on my machine, so this is not the issue.
The vulnerabilities are real
http://www.securelist.com/en/advisories/43267/?function=advisories&VN=43267
http://www.securelist.com/en/advisories/41917/?function=advisories&VN=41917
How do I get these Flash product versions updated? I am assuming if I delete the files the help and setup functions won't work.
Thanks

Alright, well.Ltaff, first of all, to let you know Solution Center does not need a different version of Adobe Flash Player. AFP is merely a conduit that puts together the coding for Solution Center so that it can function, and if AFP is not up to date then it can cause problems.
If you have the most recent version, then those security issues have already been resolved through subsequent releases. Now, what it sounds like is that your security software is falsely detecting issues in the program or AFP was not correctly configured.
As a starting step, why don't we uninstall both the printer and Flash Player and reinstall them.
First if you use a USB cord, make sure to remove it. Do not plug it back in until the software directs you to. Then go through the Devices and Printers, Programs and Features and Device Manager folders and insure that all copies, files, and programs related to the printer are removed. Then as directed, restart the computer.
In the START menu type "%temp%" and press ENTER. Here I want you to press Ctrl+A and hit DELETE. Some of the files will not allow you to delete them, skip those files and delete the majority that allows it.
Then follow this link to download the full feature software and drivers for the printer. You will need to search for the correct model number of the 4500 you have (either G510a/g/n or G509a/g/n):
www.hp.com/go/support
Then uninstall AFP from Programs and Features and install it from the download :
http://get.adobe.com/flashplayer/?fpchrome
Install that and let me know the result!
Have a great day!

Adobe Flash Security alert

message
javascript:window["contents"]
trying to commuinicate with this internet enabled location
pagead2.googlesyndication.com
pops up freq.

quote:
Originally posted by:
maggie_822
Dear all,
I m using captivate for doing my eDemo, however I am just be
alerted by Adobe Flash Player Security and be requested to update
the Internet>Settings of the browser. As I found that some
companies most likely are using Captivate for their web application
demonstration (like HSBC,
HSBC),
but they dont have any Adobe Flash Player Security prompted. Would
anyone know how to remove or skip the alert? Thanks for your help!
Regards,
Maggie
I'm having the exact same problem. Is there a way to suppress
these warnings?

Adobe flash security setting panel error

Issue is the following page no longer works as of today flash security setting https://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager04.ht ml so went to instead https://www.adobe.com/support/documentation/en/flashplayer/help/settings_manager04.html however this does not function properly either, when I select the edit location and folder or files it closes and can't therefore set the setting. We use flash for a important application and users are currently affected as they can't get on as it doesn't work and can't get past this issue. Urgent issue.

Hi, I guess this is (almost) the same for Windows 2000 users? I have several folders with older Adobe/Shockwave appdata in my German Windows 2000 installation, e.g. C:\Dokumente und Einstellungen\Hans-Jürgen Bardenha\Anwendungsdaten\Adobe\Flash Player and/or C:\Dokumente und Einstellungen\Hans-Jürgen Bardenha\Application Data\Adobe\Shockwave Player 11, created on the date or shortly after OS installation. So it's safe to simply delete them with all their content if you have this issue of a freezing Adobe Flash setting panel?
By the way, I'm asking because I also experience freezing problems now with Flash content on sites that worked fine before the update to the latest plugin. Disabling hardware acceleration in v10.1. didn't help either, I'm using the newest Opera 10.60 final, but on a very old computer.

Adobe Flash Security Update Question Version 9 and 10

How are you? So I was checking out a security website at the Washington Post when I came upon this article http://voices.washingtonpost.com/securityfix/2009/02/adobeissues_security_updatef.html#comments
In the article it detailed that Adobe issued a security update for its Flash Player. This was on February 26, 2009.
Why were we unaware of this update? So I went to the link to find out what version of Flash did I have on my Macbook Pro, it was this: You have version 9,0,151,0 installed
I was unsure of whether to update to Flash 10, do you recommend updating to Flash 10, what are the pros and cons?
The article had a link if you wanted to keep Flash 9 but get the security update. So I tried to download and install the Flash 9 update. When I got to the install part it said it was unable to install, something of a preinstall failure, I did not write down the error message. Why is it not installing?
Is it because in the last Leopard security update this issue was resolved? Is that also the reason we were notified of this Adobe security update?
What other programs come preinstalled with Leopard or Safari that we need to check the security on our own????
Thanks for your time.

Yes, you should update your FlashPlayer. The latest version includes the security update but doesn't say so.
You should also ensure you have installed Apple's security update 2009-001.
The latest version of Adobe FlashPlayer can be obtained from here:
http://www.adobe.com/shockwave/download/download.cgi?P1ProdVersion=ShockwaveFlash
(You can check here: http://www.adobe.com/products/flash/about/ to see which version you should install for your Mac and OS.
Note that Adobe requires you to uninstall any previous version of Flash Player, as mentioned here:
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_14157&sliceId=1
using the uninstaller from here (make sure you use the correct one!):
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_14157
and also that you follow the instructions closely, such as closing ALL applications first before installing. You must also carry out a permission repair after installing anything from Adobe.

About the recent Adobe Flash security problem . . .

Okay, Flash was trashed and I get along without, using Google instead of
Safari when necessary. Still, a lot of sites do use Flash.
Somewhere I got the idea that Adobe has fixed that problem. I'd like to reload Flash but on their site there's no mention of it and I don't see anything elsewhere, so please, what's the present situation?
Fortes

My Flash stopped working!
Harden your Mac against malware attacks

Adobe Flash in Windows 7 IE9 (p.s.)

To clarify, the Adobe icon is on my Computer's System and Security page. (Hewitt Packer, HP P7-1210 Control panel, System and Security)

Sorry for the confusion. When i go to my computer control panel, system and security, at the bottom of the list of other system and security settings options, Adobe Flash icon has been added. I understand now that it is so that I can set Adobe Flash security options (thanks Carl). I guess my complaint with Adobe Flash is that it doesn't function with my ie 9 activeX filter. I still haven't spent a lot of time studying the flash player settings manager ... been kind-a busy lately. If I have a breakthrough, I'll let others know.
HP computer P7-1210, Windows 7, ie9
PLEASE SEE my other posting: "Adobe Flash in Windows 7 IE9" for screenshot and remarks.
Message was edited by: drat76

When I try to watch any video clip I get this: The version of "Adobe Flash Player" on your system does not include the latest security updates and has been blocked. To continue using "Adobe Flash Player", download an updated version from Adobe's we

When I try to watch any video clip I get this:
The version of “Adobe Flash Player” on your system does not include the latest security updates and has been blocked. To continue using “Adobe Flash Player”, download an updated version from Adobe’s website.
I tried clicking on the Adobe Flash Player. It said it accepted it but it did not make a difference.
Can anyone help?
Thank you!

This did not work
On Mon, Oct 27, 2014 at 8:59 PM, Apple Support Communities Updates <

The version of "Adobe Flash Player" on your system does not include the latest security updates and has been blocked. To continue using "Adobe Flash Player", download an updated version from Adobe's website.

The version of “Adobe Flash Player” on your system does not include the latest security updates and has been blocked. To continue using “Adobe Flash Player”, download an updated version from Adobe’s website.

You haven't actually asked a question, but as stated you should only download Flash Player directy from Adobe.
Nor have you said what version of OS X and Safari you are running.
You can check here: http://www.adobe.com/products/flash/about/ to see which version you should install for your Mac and OS. Note that version 10,1,102,64 is the last version available to PPC Mac users*. The latest version,10.3 or later, is for Intel Macs only, as Adobe no longer support the PPC platform. Version 11.0.1.152 is for Lion.
* Unhelpfully, if you want the last version for PPC Macs, you need to go here: http://kb2.adobe.com/cps/142/tn_14266.html and scroll down to 'Archived Versions/Older Archives'. Flash Player 10.1.102.64 is the one you download. More information here: http://kb2.adobe.com/cps/838/cpsid_83808.html
You should first uninstall any previous version of Flash Player, using the uninstaller from here (make sure you use the correct one!):
http://kb2.adobe.com/cps/909/cpsid_90906.html
and also that you follow the instructions closely, such as closing ALL applications first before installing. You must also carry out a permission repair after installing anything from Adobe.

Issue with Adobe Flash Professional CS5.5 Security Update 11.5.2

As part of my Adobe Design Premium CS5.5 suite, I have Flash CS5.5 version 11.5.1.349. It sorely needs updating per the security announcement page. Also Kaspersky IS keeps telling me it needs to be updated as a security vulnerability. I've tried everything. I download the 11.5.2 update from Adobe's security update page: www.adobe.com/support/flash/downloads.html#flashCS55
After it downloads I go through WinZip to open the zip exe file. It then gives me a message saying that Adobe Application Manager may be damaged and I should update/reinstall it. I've tried that.
I've tried opening the zip with Kaspersky security off.
I've tried updating through the AAM. (Always says no update available).
I've tried updating from within my Flash Pro application. (Always says no update available).
(Windows 7, 64-bit, using 32-bit browsers)
Really need someone's help on this, thanks.

Just to give some ease of mind, I noticed AAM also isn't telling me about this and I am also on a lower version.
I only use Microsoft Security Essentials (basically low interference) and I'm using flash CS5.5 with version 11.5.1.349..
I'm on Win7 64 so I jumped over to the page and grabbed the win .zip. Ran it, installed fine. Now:
As soon as I finished that I realized what my clients, family and friends constantly do. Do you see this screen?
The reason why you see this is you need to extract the files from the zip file.
Open the .zip, grab the single .exe AND the Payload folder and drag it somewhere (in the same place) on your computer. You can drag it to your desktop or anywhere you like, just make sure you grab both. Then run the AdobePatchInstaller.exe.
It's a very common mistake. You always need to extract all the files in a .zip because WinZip and Windows Explorer let you "preview" whats inside but you should never RUN files from that preview. Extract first, then run.

Is there a way to view Flash videos on my iMac without downloading Adobe Flash Player? I'm concerned about performance and security with Flash Player.

Is there a way to view Flash videos on my iMac without downloading Adobe Flash Player? I'm concerned about performance and security with Adobe Flash Player.

If the video is only available in a format that requires Flash player : then no.
However, a great many can also be viewed in an HTML5 version, in which case http://hoyois.github.io/safariextensions/clicktoplugin/ or similar can be set up so that Flash never runs unless you specifically choose it to.

Update security settings for adobe flash player

I have windows 7, 64bit, adobe flash player 11.
Can't play You Tube videos...message say need to update flash player.
Went to adobe site....tried to download latest version 11.8, and message says I need to update security settings to allow.
I'm a beginner...where and how to update these settings.

Download the Adobe Flash Player installer directly by right clicking one of the following links.
Flash Player for ActiveX (Internet Explorer)
Flash Player Plug-in (All other browsers)
Save the installer - DO NOT run it yet.
Reboot your system.
BEFORE you open anything else, locate and run the installer you downloaded.

Why does Adobe Reader and Adobe Flash player keep installing McaFee Security Scan on my system?

Whenever I install the Adobe Flash player or Adobe Reader on my system, it downloads and installs McAfee Security Scan Plus at the same time. It does not ask if I want it or not, it instead forces it on me, so I have to then unistall it. I've unistalled it 3 or 4 times in the last week. I DO NOT WANT MCAFEE PRODUCTS on my computer!
Please make this an option, give the users a choice so we don't have to keep removing the stupid thing.

Did you 'Uncheck" the relevant box pointed by the red arrow ? If not you accepted the installation with McAfee.

Adobe Flash Player Security on Mac OSX 10.8.5

Hello, I need some help. I keep getting an Adobe Flash Player Security warning every time I try to load Pandora on my Mac. I not sure if this is some form of spyware. I've tried to research it online but I can't find anything with this specific error message. Also I've run a few antivirus/spyware programs, but turned up with nothing. I've never come across it before when using Pandora in the past, so I know it's something out of the ordinary.
Thank you all very much for the assistance.

There's a local file "/about/srcdoc" (I'd imagine it's in the Muse-Pandora folder) that's attempting to connect to the Internet. This is a "safety feature" built into Flash Player to prevent malicious files from connecting and downloading a virus. Why they have that for Mac OS I do-not-even-pretend-to-know, but it's there.
Open your System Preferences and the Flash Player pref pane
Click the "Advanced" tab in the Flash Player Settings Manager window
Scroll down to Developer Toos and click "Trusted Location Settings...:
Click "Add Folder..."
Select the Muse-Pandora folder in your Applications folder
Confirm
Close the Manager and retry it.

Cannot download adobe flash even after i disable microsoft security essentials. what do you suggest???

i just got an hp p7 q7 quad desktop. i'm having great difficulty downloading adobe flash player apparently because i'm using firefox as my browser. i disabled microsoft security essentials as instructed, but i'm still unable to download.
any suggestions???

I suggest that you download and run the Acrobat Cleaner Tool http://labs.adobe.com/downloads/acrobatcleaner.html
Next download and run the offline installer from http://get.adobe.com/reader/enterprise/ - all availabel Reader versions 9.5, 10.1, and 11.0 should run fine on Windows XP.
[topic moved to Adobe Reader forum]

Adobe Flash security hole

Similar Messages

Maybe you are looking for