Adobe Updates Shockwave Player 12 to Fix Memory Corruption Vulnerabilities


Two critical vulnerabilities fixed in Adobe Shockwave Player 12

Adobe has announced that Adobe Shockwave Player 12.0.9.149 is available for download. The latest release addresses a couple of critical security holes that can be exploited by cybercriminals to remotely hijack systems running vulnerable software.

Adobe Shockwave Player 12.0.7.148 and earlier versions for Windows and Macintosh are affected.

The issues addressed in version 12.0.9.149 are memory corruption vulnerabilities that could be exploited for remote code execution. The flaws have been assigned CVE-2014-0500 and CVE-2014-0501.

Liangliang Song of Fortinet’s FortiGuard Labs has been credited for finding and responsibly disclosing these security holes.

Users are advised to update their installations as soon as possible to protect their systems against potential cyberattacks.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s