Extremely Urgent: Adobe Flash Player Emergency Patch Released

Update your Adobe Flash Players ASAP, especially if you run Windows and
use Internet Explorer or any of Microsoft's email programs (which use IE
to display email).  The vulnerability exists in all versions of the
Flash Player, but has not been used on other platforms -- YET.  Lots of noise about this in the press.

Adobe - Security Bulletins: APSB12-09 - Security update available for Adobe Flash Player

Release date: May 4, 2012

Adobe warns: Flash Player malware hitting IE on Windows users | ZDNet

By Ryan Naraine | May 4, 2012, 8:24am PDT

Summary: Although the vulnerability affects Flash Player on all platforms, the malware attacks target Flash Player on Internet Explorer for Windows only.

Adobe has shipped an extremely urgent Flash Player patch to block in-the-wild malware attacks against Windows users.

Adobe described the attacks as “targeted” and warned that malicious Flash files are being delivered in e-mail messages.

Although the vulnerability affects Flash Player on all platforms, the malware attacks target Flash Player on Internet Explorer for Windows only.

Adobe Releases Security Advisory for Adobe Flash Player - US-CERT Current Activity

Friday, May 4, 2012 at 11:06 am

Adobe has released a Security Advisory for Adobe Flash Player to address a vulnerability affecting the following software versions:

• Adobe Flash Player 11.2.202.233 and earlier versions for Windows, Macintosh, and Linux operating systems
• Adobe Flash Player 11.1.115.7 and earlier versions for Android 4.x
• Adobe Flash Player 11.1.111.8 and earlier versions for Android 3.x and 2.x

This vulnerability may allow an attacker to cause a denial-of-service condition or take control of the affected system.

Critical Flash Update Fixes Zero-day Flaw — Krebs on Security

Adobe Systems Inc. today issued a security update to its Flash Player software. The company stressed that the update fixes a critical vulnerability that malicious actors have been using in targeted attacks.

Adobe classifies a security flaw as critical if it can be used to break into vulnerable machines without any help from users. The company said the vulnerability (CVE-2012-0779) fixed in the version released today has been exploited in targeted attacks designed to trick the user into clicking on a malicious file delivered in an email message, and that the exploit used in the attacks seen so far target Flash Player on Internet Explorer for Windows only.