Second Flash Player zero-day exploit found in Hacking Team's data

Even though they fixed an exploit last week, guess what we'll be patching, once again, this week?


Second Flash Player zero-day exploit found in Hacking Team's data | PCWorld

Adobe has patched two zero-day vulnerabilities in Flash Player, which were released last week as part of the Hacking Team data breach.

In a brief security notice, the company confirmed Tuesday that it had patched the two critical-rated flaws, which could allow an attacker to take control of an affected computer.

Earlier on Tuesday, Firefox browser maker Mozilla said it would block the Flash plugin until the flaw was fixed.

Meanwhile, angered by the release of the flaw, Facebook chief security officer Alex Stamos called for the plugin to be put out to pasture. In a series of tweets over the weekend, he called for a date to be set to sunset the browser plugin, following a series of high-profile hacks involving Flash software.

Adobe fixes two Flash zero-day flaws found in Hacking Team cache | ZDNet