0-day Exploit in Adobe Flash Player!

Lovely...

I too hate Flash and can't wait for it to die. It's obsolete now because this technology is built into the newer versions of the browsers, and the plug-in technology has been causing problems in other ways as well because they can also cause a terrible performance hit due to their additional overhead.

John
 
I just updated to the newest version but after seeing this thread I got to wondering if I even need Flash. What does it do?
 
stouthm said:
I just updated to the newest version but after seeing this thread I got to wondering if I even need Flash. What does it do?
Click to expand...

Flash will go away eventually, but it's still used for many websites so don't ditch it just yet. :)

Flash runs many animations and videos you see on the web including the adverts on the auran.com home page, some forums, and many other interactive content. This is the problem because these exploits can be hidden inside the code for the advertisement or webpage and get downloaded to your machine. As the web standards have changed, plug-ins such as Flash have become obsolete, but being the web obsolescence doesn't happen immediately because of all the versions of web browsers out there.

Zero-day exploits can be nasty because there's no recovery in place for them when they hit, thus the zero-day meaning no warning ahead of time. With some of these exploits, though, they're pretty particular and require the user hitting something on a website in a particular manner to trigger them. One of them that I remember from the old days required a user having the old FLA player installed. FLA was as file format used by Auto Desk to run their quick animations in 3d Studio R4 and some other products. To cause the exploit to happen, a user had to click somewhere in the left corner of a screen on a supposedly hidden pixel. The chances of something like that happening are pretty rare, but someone with nothing else better to do found it and reported it.

John
 
Maybe maybe not, it was supposed to be fixed last week and wasn't, I am not about to trust Adobe to get it right this time either. I'd give it a week before trusting they have fixed it.

If you must use Flash, according to the guy who discovered the exploits, Malwarebytes Anti-Exploit Free will supposedly stop anything happening.
 
The most annoying thing about Flash Player is the constant update windows you get on starting the PC, which unless you check the small print and uncheck the relevant box, tries installing Google Chrome and Toolbars on your system. Even if switched off at startup in msconfig it has a nasty habit of coming back.
 
Vern said:
The most annoying thing about Flash Player is the constant update windows you get on starting the PC, which unless you check the small print and uncheck the relevant box, tries installing Google Chrome and Toolbars on your system. Even if switched off at startup in msconfig it has a nasty habit of coming back.
Click to expand...

Try CCleaner to disable the start up. It worked great for me. :)

John
 
You must log in or register to reply here.

Similar threads

C
TRS22 (TRS19, too) Map issues and suggested improvement
Replies
13
Views
1K
EHE
E
A
Trainz veteran TRS22PE adoption report, after weeks of testing.
Replies
2
Views
301
wreeder
W
J
NEW Update! New versions BNSF Grade Xing's updates and how to use Custom Invisible Roads
Replies
6
Views
906
jjeff1955
J
T
Trainz Plus 116912 ready for testing
4 5 6
Replies
111
Views
10K
Sanek17
S
T
TRS19 Service Pack 4 Now Live
19 20 21
Replies
416
Views
58K
dc62ca
D
Back
Top