Adobe Flash not vulnerable after all
In a previous post, I pointed to a warning that Adobe Flash had an unpatched security problem. Now it seems that the warning was mistaken:
Symantec Corp. today said that “suspicious behavior” by a captured exploit had led it to mistakenly conclude that the most up-to-date stand-alone versions of Adobe System Inc.’s Flash Player are vulnerable to ongoing attacks from Chinese servers.
But a Symantec researcher said earlier today that Flash Player 9.0.124.0, the currently-available version of the popular multimedia player, is not vulnerable to the ongoing attacks. Just yesterday, Ben Greenbaum, a senior research manager in Symantec’s security response group, had claimed that while Flash Player 9.0.124.0 plug-ins were safe, stand-alone editions of the program were not.
“All versions of Version 9.0.124.0 on all platforms, plug-ins and stand-alone, are not vulnerable,” Greenbaum said today.
The switch was the third change in Symantec’s analysis in the past two days.
I hope Symantec finally got it right.
Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically to your feed reader.


Comments
No comments yet.
Sorry, the comment form is closed at this time.