Hacking Team Hack Unearths Two More Devastating Adobe Flash Exploits
The latest vulnerabilities, named CVE-2015-5122 and CVE-2015-5123, are considered critical, and affect the Flash player on Windows, OS X, and Linux. A verbatim threat to last week's vulnerability, "successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system."
The affected versions are as follows:
- Adobe Flash Player 184.108.40.206 and earlier versions for Windows and Macintosh
- Adobe Flash Player 220.127.116.11 and earlier versions for Linux installed with Google Chrome
- Adobe Flash Player Extended Support Release version 18.104.22.1682 and earlier 13.x versions for Windows and Macintosh
- Adobe Flash Player Extended Support Release version 22.214.171.1241 and earlier 11.x versions for Linux
To see which Flash version you have, you can simply highlight any Flash element and see the version in the drop-down menu. Or, you can check here. It seems that Google wasted no time in pushing out an updated version, as of the time of writing, the version I'm seeing in Chrome is 126.96.36.199 -- two minor iterations higher than the vulnerable version. What's interesting about that is that .203 for Windows and OS X is still considered the latest version available according to that URL.
If you're not a Chrome user, you'll have to wait it out. But given Chrome does have it, it seems like an official release is imminent.