Hacking Team Hack Unearths Two More Devastating Adobe Flash Exploits
The latest vulnerabilities, named CVE-2015-5122 and CVE-2015-5123, are considered critical, and affect the Flash player on Windows, OS X, and Linux. A verbatim threat to last week's vulnerability, "successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system."
The affected versions are as follows:
- Adobe Flash Player 18.104.22.168 and earlier versions for Windows and Macintosh
- Adobe Flash Player 22.214.171.124 and earlier versions for Linux installed with Google Chrome
- Adobe Flash Player Extended Support Release version 126.96.36.1992 and earlier 13.x versions for Windows and Macintosh
- Adobe Flash Player Extended Support Release version 188.8.131.521 and earlier 11.x versions for Linux
To see which Flash version you have, you can simply highlight any Flash element and see the version in the drop-down menu. Or, you can check here. It seems that Google wasted no time in pushing out an updated version, as of the time of writing, the version I'm seeing in Chrome is 184.108.40.206 -- two minor iterations higher than the vulnerable version. What's interesting about that is that .203 for Windows and OS X is still considered the latest version available according to that URL.
If you're not a Chrome user, you'll have to wait it out. But given Chrome does have it, it seems like an official release is imminent.