Adobe releases important security updates for Flash Player

Adobe has released security updates to address critical vulnerabilities in Adobe Flash Player 12.0.0.70 and earlier versions for Windows and Macintosh, Adobe Flash Player 11.2.202.341 and earlier versions for Linux.

The new version intends to address the following vulnerabilities in Adobe Flash Player:

• CVE-2014-0503: reported by security researcher, "Masato Kinugawa", which allows attackers to bypass origin policy.

Attackers can exploit this issue to gain access to resources from another origin, within another domain. This can facilitate cross-site request forgery attacks.

• CVE-2014-0504: reported by "Jordan Milne", which could be used to read the contents of the clipboard. The clipboard is used to store data, such as text and images, but the flaw could allow hackers to fill it with malicious URLs.

Source: secnews.gr