November 04, 2009

Adobe patches critical bugs in Shockwave Player

Update fixes five critical vulnerabilities in Adobe's Shockwave Player, four of which could allow malicious code to execute

Adobe Systems has issued an update for five vulnerabilities in its Shockwave Player, which is installed on some 450 million PCs.

It classified the update as "critical," its most severe rating. The vulnerabilities affect version 11.5.1.601 as well as earlier ones. The company recommends upgrading to version 11.5.1.602.

[ Discover what's new in business applications with InfoWorld's Technology: Applications newsletter. ]

Four of the problems could allow an attacker to execute malicious code on a computer, while the fifth one could lead to a denial-of-service condition, Adobe said in its advisory.

Shockwave Player is used to display content created by Adobe's Director program, which offers advanced tools for creating interactive content, including Flash. The Director application can be used for creating 3D models, high-quality images and full-screen or long-form digital content and offers greater control over how those elements are displayed. Adobe also issued an update for the Shockwave Player in July.

Vulnerabilities in third-party applications are often targeted by hackers. Vulnerabilities in operating systems such as Windows have become somewhat less prevalent, so hackers have turned to finding problems in applications in order to take control over computers.

Adobe's applications are frequently targeted due to their widespread installation. Programs such as Flash and the Reader and Acrobat applications have been frequently exploited to hack PCs.

Recognizing the problem, Adobe announced in May that it would issue quarterly updates for Reader and Acrobat on the same day that Microsoft releases its patches.

Close

On Twitter now

Applications

Powered by Twitter

On Twitter now

additional resources
White Paper - How to Improve Delivery of Advanced Web Applications

White Paper

Virtual Workforce: The Key to Expanding The Business While Cutting Costs

Get the independent advice and expertise you need to support a virtual workforce.

Go inside:
The three-step approach to making a virtual workforce a reality.
The four flavors of client virtualization technologies.
The three key initiatives that solve IT challenges.
Download now »
White Paper: Successfully Secure Your Wireless LAN With Wi-Fi firewalls.

White Paper

Addressing Linux Threats Leveraging Fewer Resources

The increase in Linux popularity has increased the frequency and sophistication of malware attacks. Read this 2 page white paper now to learn how you can protect your Linux environment with real-time protection that is certified by all major Linux vendors.

Download now »
White Paper - The 2009 Handbook of Application Delivery

White Paper

The 2009 Handbook of Application Delivery

Ensuring acceptable application delivery will become even more difficult over the next few years. As a result, IT organizations need to ensure that the approach that they take to resolving the current application delivery challenges can scale to support the emerging challenges. This handbook elaborates on the key tasks associated with planning, optimization, management and control and provides decision criteria to help IT organizations choose appropriate solutions.

Download now »
White Paper - Is Your Backup System Outdated?

White Paper

Mid-range Storage Considerations

A common misconception is that mid-range storage requirements are dramatically different than that of a larger enterprise. Mid-range storage users may require less capacity, but they have similar functionality and management requirements. This ESG paper examines mid-range storage needs and reviews a new solution that adjusts size while retaining value, performance and functionality.

Download now »

Sign up to receive Applications Resource Alerts

Subscribe to the Applications Newsletter

Stay informed of the latest news and technologies around application, project and performance management.

White paper

Turn Your IT Department into a Lean Machine

Like any valuable resource, IT is a terrible thing to waste. But by applying the same lean techniques that have been used to streamline manufacturing processes, IT departments can reduce costs, improve performance and better manage resources.

Download now! »

Podcast

Economy Makes Automation a Must-Have Tech for 2009

Stephen Elliot, vice president of strategy for CA's Infrastructure Management and Data Center Automation business unit, explains why difficult economic times drive the need for simplified management capabilities and advanced automation tools.

Listen now! »

White paper

What You Need to Know About Virtual Infrastructure Management - Now

According to a recent study CA conducted with 300 CIOs and top IT executives, 64 percent of respondents say they've already invested in virtualization, and the other 36 percent reported that they plan to invest in virtualization.

Download now! »

Webcast

Leveraging Virtualization and Process Automation

In this video learn about process automation in a virtualized world. How CA and VMware are enabling enterprise datacenter automation.

View now! »
©1994-2010 Infoworld, Inc.