Adobe Updates for Zero-Day Risk, Handles Emergency

Adobe issued an unscheduled zero-day update for a security issue on Feb. 20 for its Flash Player 12.0.0.44 and earlier versions for Windows and Macintosh, and Adobe Flash Player 11.2.202.336 and earlier versions for Linux.

"These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system," Adobe warned in its advisory.

In total, the Adobe update is fixing three identified common vulnerabilities and exposures (CVEs). Adobe noted that only one of them (CVE-2014-0502) is actively being exploited in the wild.

According the National Vulnerability Database information on CVE-2014-0502, the flaw has the highest possible score for impact and exploitability, which basically means it's a real and present danger.

Read eWeek Article