1. Home
  2. Data Center
  3. Adobe releases patches for eight critical security vulnerabilities

Adobe releases patches for eight critical security vulnerabilities

0
0

ManageEngine’s own security and patch expert Mike is back at it again with a report on new vulnerabilities in three different Adobe products. According to Mike, there are two vulnerabilities in Flash Player, four in ColdFusion, and two in RoboHelp. Out of these eight vulnerabilities, five are marked as critical.

Although there are no reports of hackers taking advantage of these vulnerabilities yet, theoretically attackers could use these zero-day vulnerabilities to remotely execute code on all major operating systems, including Windows, Mac, and Linux.

With the high number of network breaches that occurred this year, it’s highly recommended to patch zero-day vulnerabilities right away to avoid any remote code execution and data loss.

Patching Adobe vulnerabilities.
Updates for these vulnerabilities are available below:

  • Patch the latest Flash Player vulnerabilities by installing the newest Flash Player update, 27.0.0.130.
  • Three critical vulnerabilities exist in Cold Fusion, including a XML parsing vulnerability, an XSS bug that could lead to information disclosure, and finally a vulnerability that paves the way for remote code execution. Vulnerabilities in ColdFusion have been patched in the latest version, specifically updates 5 and 13.
  • The remaining two vulnerabilities were reported in the Windows version of Adobe’s help authoring tool, RoboHelp. These vulnerabilities allow attackers to initiate DOM-based XSS attacks to deliver malware. Both vulnerabilities were patched in the latest version of RoboHelp, RH2017.0.2 and RH12.0.4.460.

Read the entire article here, Adobe releases patches for eight critical security vulnerabilities  « ManageEngine Blogs

Via the fine folks at ManageEngine.

Categories:
ManageEngine ManageEngine delivers the real-time IT management tools that empower IT teams to meet organizational needs for real-time services and support. Worldwide, established and emerging enterprises - including more than 60 percent of the Fortune 500 - rely on ManageEngine products to ensure the optimal performance of their critical IT infrastructure, including networks, servers, applications, desktops and more. ManageEngine is a division of Zoho Corporation with offices worldwide, including the United States, India, Singapore, Japan and China.

Featured Resources:

Related Articles:

| LATEST FEATURED RESOURCES

White Papers

‘All You Need to Know About Microsoft Windows Nano Server’ Veeam White Paper

Now updated for Windows Server 2016 GA release! You probably heard about Windows Nano Server already … but what is it exactly, and how do you get started with it? What value will it bring to your environment? Nano Server is a headless, 64-bit only deployment option for Windows Server 2016. Microsoft created this component specifically with […]

Downloads

Download Commvault VM Backup and Recovery: end-to-end VM backup, recovery and cloud management

Commvault’s ability to provide end-to-end VM backup, recovery and cloud management creates a significantly better way to build, protect and optimize VMs throughout their lifecycle. Our best-in-class software for VM backup, recovery and cloud management delivers a number of significant benefits, including: VM recovery with live recovery options; backup to and in the cloud; custom-fit […]

On-Demand Webinars

Architecting for today’s desktop environments – FSLogix On-Demand Webinar

October 19, 2017 Webinar with David Young, Solutions Architect and Product Champion, and Brandon Lee, Solutions Marketer. Video Recording of a live demo of FSLogix and an overview of the latest release of FSLogix Apps featuring Roaming XenApp Email Search and OneDrive App along with Skype for Business Global Address List and Device Based Licensing. […]

Latest Videos

Current State of EUC – E2EVC Video

Session from @E2EVC 2017 Orlando. For event information please visit www.e2evc.com/home. For slides, additional info etc please contact the presenter directly on Twitter. For best video and sound quality do visit the event! This video is from the fine folks at E2EVC Conference

Views All IT News on DABCC.com
Views All IT Videos on DABCC.com
Win a Tesla P100D

Visit Our Sponsors