The Tech Diary of an IT support geek

  • Home
  • Android
  • iOS
  • Mobile
  • PC
  • Tips
  • Contact US
Home » Microsoft speeds up IE10 Flash patching, matches Google

Microsoft speeds up IE10 Flash patching, matches Google

 Adobe today issued a surprise update for Flash Player that patched 25 critical vulnerabilities in the ubiquitous media software.

The California company urged Windows users to apply the update in the next 72 hours after rating the fix as “Priority 1” in its three-step system. That ranking indicates “vulnerabilities being targeted, or which have a higher risk of being targeted, by exploit(s) in the wild.”

Google released an update for the Windows version of Chrome, which includes Flash Player, at 10 a.m. PT.

And although Microsoft dated the Internet Explorer 10 (IE10) for Windows 8 update as Oct. 5 on its download website, on Monday a spokeswoman for the Redmond, Wash. developer said that the date was incorrect. Like Google, Microsoft began pushing the IE10 update via Windows Update today at approximately 10 a.m. PT.

Of the 25 vulnerabilities, 14 were classified as buffer overflow bugs, and the remaining 11 were characterized as memory corruption flaws. All could “lead to code execution,” Adobe said in its Monday security advisory.

Background

Microsoft’s swift patching of IE10 on Windows 8 today was in contrast to last month, when the company first said it would not fix Flash flaws until late October. After being blasted for its laissez-fair attitude, Microsoft backtracked, saying it would issue an update. It did so on Sept. 21, when a company executive promised closer coordination with Adobe.

Microsoft, not Adobe, is responsible for patching Flash Player in Windows 8 because the former has mimicked Google’s Chrome by building the software into IE10.

While Windows 8 has not officially launched — the new OS goes on sale Oct. 26 — developers, IT professionals and many enterprises have had access to Windows 8 since mid-August.

Andrew Storms, director of security operations with nCircle Security, saw Google’s hand in the unexpected Flash update.

“This idea that Adobe would coordinate with Microsoft makes me ask why couldn’t they have waited until tomorrow?” Storms asked, noting that Oct. 9 is Microsoft’s already-scheduled Patch Tuesday. “There are no exploits in the wild, according to Adobe. But then I got wind of this whole Pwnium thing, so the stars pretty much align.”

Under Storms’ theory, Adobe felt obliged to ship the Flash update today because Google will kick off a second h*cking contest — dubbed “Pwnium 2” — in Kuala Lumpur, Malaysia, on Wednesday.

Google security engineers reported 24 of the 25 vulnerabilities to Adobe, most likely to harden Chrome against h*ckers’ attacks at the contest.

When Google announced Pwnium 2 in August, it said it would set aside as much as $2 million in prize money, to be paid out in increments of $60,000, $50,000 and $40,000 to researchers able to exploit bugs in Chrome, in Chrome and other software, or in non-Google code.

The continued abruptness of Flash updates left a sour taste in Storms’ mouth.

“These half-policies and half-practices cause confusion,” Storms argued. “They’re disjointed. When [the Flash Player] update appeared today, I thought, ‘It must be a zero-day’ because there was no warning.”

Adobe said that it was not aware of any in-the-wild exploits now leveraging the vulnerabilities patched today.

“Ordinarily, it would have been fine to wait to patch this until tomorrow,” said Storms, again referring to Microsoft’s Patch Tuesday. “It probably would have happened tomorrow, but Google forced the hand of Adobe.” Windows 8 users can obtain today’s Flash update for IE10 via the Windows Update service, as well as through the enterprise-grade WSUS (Windows Server Update Services).

So far this year, Adobe has issued eight Flash updates: One in February; two in March; one each in May and June; two in August; Source: Microsoft speeds up IE10 Flash patching, matches Google

  • Facebook
  • Twitter
  • LinkedIn
  • WhatsApp
  • Reddit

Related

Posted by Obasi Miracle on this date: 1 Comment
Shortlink:

Sign Up in Seconds

Join us to get latest posts (ONLY) delivered to your inbox. No Spam, We Promise!

About Obasi Miracle

I am a dedicated web developer with interest in blogging and app development. I have lots of buddies and always ready to connect with like-minded pals - See more about me.

Comments

  1. Anonymous says

    at

    Hi therе! Ӏ just wanted to asκ if
    you eνеr hаvе аny trouble with haсkеrs?

    Мy last blog (wordρгеss) waѕ hacked anԁ ӏ
    ended up losing sevеral wеeks οf hard work due tо no data
    bacκup. Do you have аny solutiοns to prevent hаckеrs?
    Also see my web site > {textile dictionary

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Next PostPermanently stop Blogger.com Blog from Redirecting to Country-Specific url Without using a custom domain
Previous PostHow to Unroot a Build on Android X86

RSS Inside: 3rd Planet Techies

  • Lasta Fasting App Review: Can It Help You Reach Your Health Goals?
  • How To Create Amazing Websites with WordPress Elementor Themes
  • How to Save Snapchat Videos in HD: A Complete Guide
  • 4 Unbeatable Reasons To Invest In Digital Signage

Sign Up in Seconds

Join us to get latest posts (ONLY) delivered to your inbox. No Spam, We Promise!


Recent Posts

  • Full List Of Cars With An S Logo [3ptechies]
  • Factors to Consider When Searching for the Best Mobile Phone Plans
  • Do Battery Savers Work? Can They Really Extend Battery Life?
  • Why Does Phone Keep Turning Off Itself and 9 Ways to Fix It

Looking For?

mtn cheat for android, how to transfer data on etisalat, how to share data on airtel, How to share data on etisalat, mtn free browsing cheat for android phones, how to transfer mb on etisalat, mtn mb cheat for android, mtn free browsing on android, how to transfer data on airtel, latest mtn cheat for android, mtn free browsing cheat codes with unlimited data downloads, how to share airtel data, mtn cheat code for android, best airtel tariff plan for browsing, 2go for windows phone, sharemobile ro, how to transfer etisalat data, mtn cheats for android, etisalat data transfer, airtel data share
© 2022. The Tech Diary of an IT support geek. Privacy Policy