Adobe Flash Player ゼロデイ脆弱性に注意 on 15 Jun. 2016

2016/06/15 14:29

Adobe Flash Player ゼロデイ脆弱性に注意 on 15 Jun. 2016

Adobe Flash Player 21.0.0.242 ならびに、それ以前の Adobe Flash Player にゼロデイの脆弱性 ( CVE-2016-4171 ) が存在することがアナウンスされました。

Adobe 社は、早ければ 06月 16日 2016 ( 米国時間 ) には、更新プログラムを配信すると公表しています。

ゼロデイの脆弱性 ( CVE-2016-4171 ) は、Critical に分類される脆弱性です。

— 16 Jun. 2016 追記 —

Windows 7 , Windows XP の Internet Explorer では、スタンドアローンインストーラーから、 Adobe Flash Player 22.0.0.192 に更新が可能です。Windows 8 , Windows 10 , Google Chrome には、未だ配信されていません。

Adobe Flash Player 22.0.0.192 Updated on 16 Jun. 2016

— 16 Jun. 2016 追記ここまで —

Adobe Flash Player の更新プログラムが配信されるまでは、インターネットの閲覧には十分な注意が必要です。

CVE-2016-4171 の修正プログラムが配信されるまでは、一時的に Adobe Flash Player を無効にするか、限定された用途のみで使用することをお勧めします。

Adobe Security Advisory

Security Advisory for Adobe Flash Player
Release date : June 14, 2016
Vulnerability identifier : APSA16-03

CVE number : CVE-2016-4171
Platforms : Windows, Macintosh, Linux and Chrome OS

Summary

A critical vulnerability ( CVE-2016-4171 ) exists in Adobe Flash Player 21.0.0.242 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system.

Adobe is aware of a report that an exploit for CVE-2016-4171 exists in the wild, and is being used in limited, targeted attacks. Adobe will address this vulnerability in our monthly security update, which will be available as early as June 16. For the latest information, users may monitor the Adobe Product Security Incident Response Team blog .

Severity ratings
Adobe categorizes this as a critical vulnerability.

Adobe Product Security Incident Response Team (PSIRT) Blog

Security Advisory posted for Adobe Flash Player (APSA16-03)

Posted on June 14, 2016 by Adobe Product Security Incident Response Team

A Security Advisory ( APSA16-03 ) has been published regarding a critical vulnerability ( CVE-2016-4171 ) in Adobe Flash Player . Adobe is aware of a report that an exploit for CVE-2016-4171 exists in the wild, and is being used in limited, targeted attacks. Adobe will address this vulnerability in our monthly security update, which will be available as early as June 16.

Issued by Volitional Engineering
( winveg.com ) on 15 Jun. 2016