Adobe Reader and Acrobat on MacOSX also include a file named authplay.dll ? (Any chance Apple's 'Preview' PDF-reading capabilities are similarly vulnerable?)
Apple's Preview app uses it's own PDF interpreter, so it is unaffected.
New Adobe Flash 0day, have a nice weekend
21–30 of 74 posts
Re: New Adobe Flash 0day, have a nice weekend
#22And read the fine print regarding 10.1 RC: "The Flash Player 10.1 Release Candidate available at ... does not APPEAR to be vulnerable." Very different than "Here's a fix." (Snarky comment removed.)
No, no it does not sum up why there's no Flash on the iPhone. Thanks for playing though. Enjoy your consolation prize.
[deleted]
Re: New Adobe Flash 0day, have a nice weekend
#23Earlier quoted context omitted.
No, no it does not sum up why there's no Flash on the iPhone. Thanks for playing though. Enjoy your consolation prize.
[deleted]
I wish your comment was a fact. But Apple is a business and they have business interests when it comes to these outsider platforms.
My understanding is that Apple doesnt allow Java ,Silverlight , Qt or any of those, because these platforms could gradually in-signify the need for a walled garden of apps. App Store is a real cash cow with a lot of potential and Apple clearly doesnt want to purge it off(and that is a good business move.)
IMHO, the same even applies to html5. Apple runs huge campaigns and invests in Safari development to make sure that webkit could gradually insignify the need for a plugin to run interactive content. But try running most of these html5 apps on an iphone/ipad.The rendering framerate is very low and is almost not usable. While native apps run real good, the discrimination against webkit could be that Apple is purposefully delaying the iDevice users' dependency on web apps .
I believe Apple's all-control policy is more of a business move than a security related one
Re: New Adobe Flash 0day, have a nice weekend
#24I don't use Adobe Reader anymore. Foxit Reader, http://www.foxitsoftware.com/pdf/reader/, is way smaller and faster. And it's not by Adobe. :)
Re: New Adobe Flash 0day, have a nice weekend
#25Perfect headline. It straddles the ambiguity between the two possible meanings: the sarcastic one, about IT personnel scrambling to put fixes in place over their 'nice' weekend, and the non-sarcastic one, addressed to hackers who could have some fun with this.
In any case, Adobe, the timing has exactly the level of thoughtfulness we have come to expect from the Flash team. The only way you could have done more damage would be to have done it last week when the US had a long weekend, or some other even longer holiday.
Re: New Adobe Flash 0day, have a nice weekend
#26Well that's ONE way to get everyone onto 10.1
Re: New Adobe Flash 0day, have a nice weekend
#27Adobe Reader and Acrobat on MacOSX also include a file named authplay.dll ? (Any chance Apple's 'Preview' PDF-reading capabilities are similarly vulnerable?)
Apple's 'Preview' PDF viewer has lots of security vulnerabilities. Simple fuzzing will quickly find plenty of 0day.
Re: New Adobe Flash 0day, have a nice weekend
#28Yesterday I removed flash from my Mac Internet Plugins folder.
I can't say I'm missing it. Nearly all website work, a lot of ads are gone. Strangely, html5/h.264 is often the fall back for flash, I really would wish they did that the other wise around.
Re: New Adobe Flash 0day, have a nice weekend
#29They suggest addressing the Flash vulnerability by installing the prerelease 10.1 version, which "does not appear to be vulnerable".
But the first step of installing 10.1 (on Windows and MacOS) is to run an uninstaller, also available on the download page:
http://labs.adobe.com/downloads/flashplayer10.html
Perhaps the prudent should stop after that uninstall step, for safety from other future exploits, as well.
Re: New Adobe Flash 0day, have a nice weekend
#30Earlier quoted context omitted.
[deleted]
I wish your comment was a fact. But Apple is a business and they have business interests when it comes to these outsider platforms. My understanding is that Apple doesnt allow Java ,Silverlight , Qt or any of those, because these platforms could gradually in-signify the need for a walled garden of apps. App Store is a real cash cow with a lot of potential and Apple clearly doesnt want to purge it off(and that is a go…
I understand the business move, but I never understood the "cash cow" reasoning. Most apps appear to be in the $2.99 to $.99 range. The 60 cents Apple gains from a $1.99 app barely covers credit card fees (for multiple currencies), bandwidth fees, bank fees to send money to developer, and paying salaries for all those app reviewers.
Occam's Razor suggests that they want to build "only the best apps" so the way to do that is to "completely control the build toolchain". Has nothing to do with "cash cow" conspiracy theories.