Thursday, February 10, 2011

Adobe patches bugs in Reader and Flash

29 vulnerabilities in Reader and 13 more in Flash are patched:   "... Nearly all the Reader bugs were rated "critical," meaning that they could be exploited by attackers to plant malware on an unpatched system, although for several, Adobe wasn't certain that remote code execution was possible. Two of the 29 could lead to cross-site scripting (XSS) attacks, a common tactic by identity thieves who target browsers.  Hackers could exploit one of the vulnerabilities -- a Windows-only flaw -- to gain additional privileges on a machine.  Almost half of the bugs were in Reader's font-, image- or 3-D file-parsing code, Adobe said in the advisory issued on Tuesday.  The updates brought Reader to versions 8.2.6, 9.4.2, an 10.0.1 for Windows and Mac OS X. Linux users must wait until Feb. 28  ..."    For update info and the download link, go to Adobe Flash Player.

http://it.oc.com.tw/ocitview.asp?gitid=1581522   "... 新版本的Flash Player目前在官網已經開放下載了,新增功能中最主要的是〝Stage Video API〞,其可以大幅降低CPU在播放高畫質影片時的Loading,讓電腦在處理這類高負載檔案時能分出更多資源作其他運用。... 影響最大的還是行動裝置,因為有越來越多的智慧手機、平板支援FullHD高畫質,要是可以大幅降低播放時所佔用的CPU負載 ... 讓消費者的使用經驗更順暢。不過要注意一點的是新版10.2已經不支援較舊型的硬體,比如說2000年左右或更舊型的機種就無法升級,要請消費者注意,如果不確定是否支援升級的話,還是要準備10.1版的備份,如果不行就安裝舊版本。 ..."