This is good news – for the recently acknowledged zero-day security vulnerability within Adobe Flash Player, Acrobat and Reader there will be a first update available tomorrow. Adobe updated their security advisory on that matter to reflect the update schedule – the Flash Player update fixing the vulnerability for Windows, Mac, Linux and Solaris will be available tomorrow, Friday, April 15.

For the also vulnerable Adobe Reader and Acrobat, updates are planned “no later than the week of April 25, 2011″. The only exception is Adobe Reader X for Windows which will be updated on the regular planned Patchday on June 14, as the integrated sandbox prevents successful exploitation there according to Adobe.

Please be prepared to download and install the update tomorrow as soon as it is available!

Dirk Knop
Technical Editor

• Flash Player Update available
  Just a short notice on the now available Adobe Flash Player Update: Version 10.2.159.1 has been released which fixes the critical security vulnerability which allow attackers to infect computers with ...
• Adobe Security Update for Flash Player
  Today, Adobe announced the release of a security update for its Flash Player software, which was originally scheduled for release on September 27th.  The update was moved up a week, as it addresses a ...
• Adobe Flash Player 10.1 – Security Update Available, (Wed, Jun 16th)
  Please patch those flash players as soon as possible. Last week Handler Deb Hale posted a diary speaking to some Adobe proof of concept malware in the wild. http://isc.sans.edu/diary.html?story...
• Fake Adobe Flash Player update will fool many
  A nicely designed website, a very promising video… only one thing in the way: Well, this should be enough to lure a lot of people into running the so-called missing Flash Player. The exact url...
• Analysis of the CVE-2011-0611 Adobe Flash Player vulnerability exploitation
  About a month ago, we blogged about an Adobe Flash Player vulnerability (CVE-2011-0609) that was actively exploited in the wild. That exploit was hidden inside a Microsoft Excel document. Ov...
• Zero-Day Vulnerability in Adobe Flash Player, Reader and Acrobat
  Adobe released a security advisory in which it warns from a zero-day vulnerability within current version of Adobe Flash Player, Reader and Acrobat. Affected are Flash Player 10.2.153.1 and earlier ve...
• A Technical Analysis on the CVE-2011-0609 Adobe Flash Player Vulnerability
  On March 14, Adobe released a security advisory (APSA11-01) warning of 0-day attacks affecting Adobe Flash Player (versions earlier than and including 10.2.152.33). These attacks were hidden inside Mi...
• Adobe Issues Update for Flash, Warning for Reader
  Yesterday was sort of a busy day for Adobe security. Of course, that doesn't seem like such an uncommon occurrence these days. Adobe issued an update to address a security flaw in Flash, and followed ...
• CVE-2010-3654 Adobe Flash Player Zero Day Vulnerability
  CVE-2010-3654: A critical vulnerability exists in Adobe Flash Player 10.1.85.3 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems; Adobe Flash Player 10.1.95.2 and earlie...
• Adobe Flash Player & Adobe Reader and Acrobat 0-day (CVE-2010-3654)
  Websense® Security Labs™ has received reports of a new zero-day exploit that targets the Adobe Flash Player. Our customers are protected from this latest vulnerability by ACE, our ...