• Home
  • About 404TS
  • Contact

404 Tech Support

Where IT Help is Found

  • Articles
    • Code
    • Entertainment
    • Going Green
    • Hardware, Gadgets, and Products
    • Management
    • Network
    • News
    • Operating Systems
    • Security and Privacy
    • Software
    • System Administration
    • Talking Points
    • Tech Solutions
    • Web
    • Webmaster
  • Reviews
  • Media
    • Infographics
    • Videos
  • Tech Events
  • Tools
    • How do I find my IP address?
    • Browser and plugin tests
  • Get a Technical Consultation
You are here: Home / Articles / Security and Privacy / Adobe Flash Player 11.3 brings new security features

Adobe Flash Player 11.3 brings new security features

2012-06-09 by Jason

Adobe released updates to Flash Player yesterday for Windows, Mac, Linux, and Android platforms. While addressing a number of vulnerabilities, this version also introduces Flash Player Protected Mode (sandbox) for Windows Firefox users. The Flash Player for Mac OS X includes the background updater and is signed with an Apple Developer ID to ensure compatibility with the new Gatekeeper tech in Mountain Lion.

The Adobe Secure Software Engineering Team blog talks about these new features in details:

The background updater on Mac works similar to the updater introduced for Windows in Flash Player 11.2. The Mac Launch daemon will launch the updater every hour to check for updates if the user opts in to background updates. If an update is found, the updater will download and install the update without interruption.

With Mac OS X Mountain Lion (10.8), Apple introduced a feature called “Gatekeeper,” which can help end-users distinguish trusted applications from potentially dangerous applications. Gatekeeper checks a developer’s unique Apple Developer ID to verify that an application is not known malware and that it hasn’t been tampered with. Starting with Flash Player 11.3, Adobe has started signing releases for Mac OS X using an Apple Developer ID certificate. Therefore, if the Gatekeeper setting is set to “Mac App Store and identified developers,” end-users will be able to install Flash Player without being blocked by Gatekeeper. If Gatekeeper blocks the installation of Flash Player with this setting, the end-user may have been subject to a phishing attack.

A separate post gets into further detail to explain the new sandbox that the Firefox plugin uses on Windows Vista and 7. Windows XP does not get the same level of protection and Adobe did not see the investment worth it with Windows XP use declining – another reason to upgrade if you’re still on XP.

ProductLatestPlatform
Adobe Flash Player11.3.300.257Windows and Mac OS X
11.2.202.236Linux
11.1.115.9Android 4.x
11.1.111.10Android 3.x and 2.x
Adobe AIR3.3.0.3610Windows, Mac, and Android

The updates resolve a variety of vulnerabilities:

These updates resolve a memory corruption vulnerability that could lead to code execution (CVE-2012-2034).

These updates resolve a stack overflow vulnerability that could lead to code execution (CVE-2012-2035).

These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2012-2036).

These updates resolve a memory corruption vulnerability that could lead to code execution (CVE-2012-2037).

These updates resolve a security bypass vulnerability that could lead to information disclosure (CVE-2012-2038).

These updates resolve null dereference vulnerabilities that could lead to code execution (CVE-2012-2039).

These updates resolve a binary planting vulnerability in the Flash Player installer that could lead to code execution (CVE-2012-2040).

Download Adobe Flash Player directly using the link in this previous 404 Tech Support article.

In other Adobe news, Adobe Reader and Acrobat 9 will reach end-of-life a year from now on June 26, 2013.

Filed Under: Security and Privacy, Software

Trending

  • Configure Adobe Acrobat and Reader to open PDFs at 100% by default
    In Software, Tech Solutions
  • Evaluating enterprise antivirus solutions
    In Security and Privacy, System Administration
  • Cardreaderlookupwindow crashes at log out
    In Software, Tech Solutions

Latest Media Posts

Find Out Where To Download SNES ROMs

Find Out Where To Download SNES ROMs

Multifunctional Video Conversion Tools – Wondershare Video Converter

Multifunctional Video Conversion Tools – Wondershare Video Converter

  • Popular
  • Latest
  • Today Week Month All
  • How to ‘Unblock’ multiple files at a time with PowerShell How to 'Unblock' multiple files at a time with PowerShell
  • Increase IIS Private Memory Limit to improve WSUS availability Increase IIS Private Memory Limit to improve WSUS availability
  • Command line to take ownership and change permissions Command line to take ownership and change permissions
  • Creating and editing views in phpMyAdmin Creating and editing views in phpMyAdmin
  • Configure Outlook to recurring appointments for the last weekday of the month Configure Outlook to recurring appointments for the last weekday of the month
  • How to Purchase Cryptocurrencies? How to Purchase Cryptocurrencies?
  • Top 6 necessary aspects to consider when hiring Angular developers Top 6 necessary aspects to consider when hiring Angular developers
  • Full guide on drawbacks and benefits of Node.js for making the perfect choice for your business Full guide on drawbacks and benefits of Node.js for making the perfect choice for your business
  • Benefits of End-To-End Testing That Will Match Company Expectations Benefits of End-To-End Testing That Will Match Company Expectations
  • 3 Key Features of Pets Health Monitoring Systems 3 Key Features of Pets Health Monitoring Systems
Ajax spinner

Elevator Pitch

404 Tech Support documents solutions to IT problems, shares worthwhile software and websites, and reviews hardware, consumer electronics, and technology-related books.

Subscribe to 404TS articles by email.

Recent Posts

  • How to Purchase Cryptocurrencies?
  • Top 6 necessary aspects to consider when hiring Angular developers
  • Full guide on drawbacks and benefits of Node.js for making the perfect choice for your business

Search

FTC Disclaimer

404TechSupport is an Amazon.com affiliate; when you click on an Amazon link from 404TS, the site gets a cut of the proceeds from whatever you buy. This site also uses Skimlinks for smart monetization of other affiliate links.
Use of this site requires displaying and viewing ads as they are presented.

Copyright © 2023 · Magazine Pro Theme on Genesis Framework · WordPress · Log in