Computerworld – (International) Adobe patches critical Flash bugs, ships sandboxed plug-in for Firefox. June 8, Adobe patched seven critical vulnerabilities in Flash Player — the fifth security update so far in 2012 — and released a sandboxed plug-in for Mozilla’s Firefox. The company also released the “silent update” tool for OS X, and said it prepped Flash for the upcoming OS X 10.8, Mountain Lion, by signing its code, a requirement if users are to install software downloaded from sources other than Apple’s own Mac App Store. “These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system,” said Adobe in an advisory published June 8. The flaws included memory corruption, integer and stack overflow, and security bypass bugs. One of the seven was tagged as a “binary planting” vulnerability in the Flash installer.
Ali Loney, on June 08, 2012