Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

New Adobe Flash 0day, have a nice weekend

adobe.com

Post reply on HN
Print view View original

11–20 of 74 posts

Re: New Adobe Flash 0day, have a nice weekend

#11

Post by drivebyacct »

TheKid wrote: post #9

And read the fine print regarding 10.1 RC: "The Flash Player 10.1 Release Candidate available at ... does not APPEAR to be vulnerable." Very different than "Here's a fix." (Snarky comment removed.)

No, no it does not sum up why there's no Flash on the iPhone. Thanks for playing though. Enjoy your consolation prize.

Re: New Adobe Flash 0day, have a nice weekend

#12

Post by pan69 »

I've seen Adobe do quite a few security announcements over the years but I've never actually seen any of the exploits in action or explained. I'm really curious how serious these exploits really are and if they are actually practical (or more theoretical). Any references greatly appreciated.

Re: New Adobe Flash 0day, have a nice weekend

#14

Post by sliverstorm »

datd00d wrote: post #4

The fix is to install 10.1 RC, and delete/rename/ACL authplay.dll. I wont comment on the whole "use our RC release" as a mitigation path in production env's....

Honestly it seems much more like a statement of the facts so you can make a choice. I'd rather also know the RC is unaffected than ONLY know that the current version is vulnerable. Obviously an RC release is not a long term fix, but this is a breaking bug.

Re: New Adobe Flash 0day, have a nice weekend

#19

Post by ptomato »

elblanco wrote: post #7

and? http://www.engadget.com/2010/03/19/charlie-miller-to-reveal-...

I'm not quite sure what the relevancy of this is, unless you're actually such a rabid Apple hater that you automatically see any mention of Adobe flaws as an argument for Apple or somesuch.
Post reply on HN