If you are using Flash player, then here’s an important update for you. Recently, Adobe disclosed a critical remote code execution vulnerability that exists in Flash Player 28.0.0.137 and its earlier versions. According to Adobe, the vulnerability known as CVE-2018-4878 is being exploited to perform “limited, targeted attacks against Windows users”, allowing the hackers to take full control of the system. The recently vulnerability also affects ChromeOS, Linux and MacOS users who were running the following software version v28.0.0.137 and below:
Adobe Flash Player Desktop Runtime (Windows, Macintosh) Adobe Flash Player for Edge and IE 11 (Windows 10, 8.1) Adobe Flash Player Runtime (Linux) Adobe Flash Player for Google Chrome (Windows, Macintosh, Linux, and Chrome OS)
According to Adobe, hackers can not only attack victims system using web pages with flash content but also via email containing documents with embedded malicious flash content. Adobe has recommended users to enable the Protected View for Office which opens malicious office files in read-only mode. The patch to fix this vulnerability is yet to arrive. Users are recommended to disable the flash player until the patch arrives on February 5. Previously, Adobe has officially announced the end date of Adobe Flash. The tool will disappear for forever in 2020, so, uninstalling the Flash Player completely won’t be a cause of any problem. So, what do you think about this? Share your views in the comment box below.
