Corrine 2,738 Posted March 28, 2012 Share Posted March 28, 2012 Adobe recognizes the critical nature of updating third-party software. As a result, this release of Flash Player contains a new background updater. As explained by Peleus Uhley in An Update for the Flash Player Updater, "If you read this September 2011 CSIS report, then you saw that 99.8 percent of malware installs through exploit kits are targeting out-of-date software installations. This point was reiterated recently in volume 11 of the Microsoft Security Intelligent Report. Also, attackers have been taking advantage of users trying to manually search for Flash Player updates by buying ads on search engines pretending to be legitimate Flash Player download sites. Improving the update process is probably the single most important challenge we can tackle for our customers at this time." (See source for links to CSIS report & Microsoft SIR.) After updating to Adobe Flash Player 11.2, the following update options will be available: Install updates automatically when available (recommended) Notify me when updates are available Never check for updates (not recommended) Flash Player 11 (32-Bit) IE 32-Bit: http://fpdownload.macromedia.com/get/flash...dc/11.2.202.228 /install_flash_player_ax_32bit.exe Non-IE 32-Bit (Opera, Firefox etc): http://fpdownload.macromedia.com/get/flash...dc/11.2.202.228 /install_flash_player_32bit.exe Flash Player 11 (64-Bit) IE 64-Bit: http://fpdownload.macromedia.com/get/flash...dc/11.2.202.228 /install_flash_player_ax_64bit.exe Non-IE 64-Bit (Opera Firefox etc): http://fpdownload.macromedia.com/get/flash...dc/11.2.202.228 /install_flash_player_64bit.exe Link to post Share on other sites
Guest LilBambi Posted March 28, 2012 Share Posted March 28, 2012 Glad to hear it. Link to post Share on other sites
zlim 1,249 Posted March 28, 2012 Share Posted March 28, 2012 Is version 11.2 out of beta? I have not installed anything beyond 11.1.102.63 because everything beyond that was listed as a beta release and the 11.2 newest is called RC1. Link to post Share on other sites
frapper 84 Posted March 28, 2012 Share Posted March 28, 2012 FileHippo is still showing it as a Release Candidate. Latest Version Flash Player 11.2.202.221 RC 1 (IE) Link to post Share on other sites
Corrine 2,738 Posted March 28, 2012 Author Share Posted March 28, 2012 Yes, version 11.2 was released. From the Security Advisory: Adobe recommends users of Adobe Flash Player 11.1.102.63 and earlier versions for Windows, Macintosh and Linux update to Adobe Flash Player 11.2.202.228. Users of Adobe Flash Player 11.1.102.63 and earlier versions for Solaris should update to Adobe Flash Player 11.2.202.223. Users of Adobe Flash Player 11.1.111.7 and earlier versions for Android 3.x and earlier versions should update to Flash Player 11.1.111.8. Users of Adobe AIR 3.1.0.4880 for Windows, Macintosh and Android should update to Adobe AIR 3.2.0.2070. This update resolves a memory corruption vulnerability related to URL security domain checking that could lead to code execution (ActiveX, Windows 7 or Vista only) (CVE-2012-0772). This update resolves a memory corruption vulnerability in the NetStream class that could lead to code execution (CVE-2012-0773). Link to post Share on other sites
Corrine 2,738 Posted March 29, 2012 Author Share Posted March 29, 2012 The links in my original post were malformed (thanks, Aryeh). Guess I should have just linked to my blog post. Flash Player 11 (32-Bit) IE 32-Bit: http://fpdownload.macromedia.com/get/flash...er_ax_32bit.exe Non-IE 32-Bit (Opera, Firefox etc): http://fpdownload.macromedia.com/get/flash...layer_32bit.exe Flash Player 11 (64-Bit) IE 64-Bit: http://fpdownload.macromedia.com/get/flash...er_ax_64bit.exe Non-IE 64-Bit (Opera Firefox etc): http://fpdownload.macromedia.com/get/flash...layer_64bit.exe Link to post Share on other sites
zlim 1,249 Posted March 29, 2012 Share Posted March 29, 2012 MajorGeeks has it marked as Final so all my XP and 7 computers have been patched. Link to post Share on other sites
Guest LilBambi Posted March 29, 2012 Share Posted March 29, 2012 Adobe's latest critical security update pushes scareware - Ed Bott Blog at ZDNet: Summary: Adobe just released a critical Flash Player security update. Good news: it includes a new automatic updater for Windows. Bad news: Adobe’s download page pushes a misleading “system optimizer” designed to scare users into paying for unneeded repairs. More in the article. It mentions what Corrine was saying, but it also notes that Adobe now shows misleading ad for a so called system optimizer on the resultant page that opens to prove the Flash Player is installed properly. Hopefully most will know to ignore crap like that, but un savvy friends and family may need to be made aware before they click on something they don't need. Link to post Share on other sites
Corrine 2,738 Posted March 29, 2012 Author Share Posted March 29, 2012 It isn't necessary to go to About Adobe Flash Player webpage. Instead, right-click on content running (i.e., head to http://www.youtube.com) in Flash Player and select "About Adobe Flash Player" from the menu. Edit Note: I discovered that the right-click check for version works with Firefox but not IE9. Link to post Share on other sites
Tushman 19 Posted March 30, 2012 Share Posted March 30, 2012 FileHippo is still showing it as a Release Candidate. Why rely on a 3rd party to tell what is the latest version when you can get it directly from the source? Link to post Share on other sites
Temmu 1,931 Posted March 30, 2012 Share Posted March 30, 2012 as corrine already noted, this stuff was quite a scare in the security community - Adobe Flash Player Memory Corruption Vulnerability CVE-2012-0772 Adobe Flash Player FLV Parsing Memory Corruption Vulnerability CVE-2012-0773 Oracle Java SE Remote Java Runtime Environment Remote Code Execution Vulnerability CVE-2012-0507 Link to post Share on other sites
zlim 1,249 Posted March 30, 2012 Share Posted March 30, 2012 File hippo doesn't include the junk that adobe does. I don't have to uncheck whatever av program or toolbar it adobe wants to include. 9McAfee now but I think it might have been Norton in the past and perhaps google toolbar too). I download the IE and the non IE versions from filehippo, put it on a USB stick and install it on all my computers from the stick. I've been doing it this way for several years and prefer it to going to adobe's site. We all don't do things the same way. Link to post Share on other sites
Corrine 2,738 Posted March 30, 2012 Author Share Posted March 30, 2012 The FTP version available from Adobe doesn't include any extras. Link to post Share on other sites
Tushman 19 Posted March 31, 2012 Share Posted March 31, 2012 (edited) File hippo doesn't include the junk that adobe does. I don't have to uncheck whatever av program or toolbar it adobe wants to include. 9McAfee now but I think it might have been Norton in the past and perhaps google toolbar too). I download the IE and the non IE versions from filehippo, put it on a USB stick and install it on all my computers from the stick. I've been doing it this way for several years and prefer it to going to adobe's site. We all don't do things the same way. The point that i was making is that Adobe (the source of the software) is far more likely to have the latest [the most current] information on a final version release than a 3rd party hosting site. If you use the download link that provided in my post above, you won't get any bundled software. We've had this discussion in the past (or similar topics covering flash player). There's always been links that members have provided for the full stand alone installer that didn't come with extra 'crap' software. I see no reason to rely on FileHippo. Edited March 31, 2012 by Tushman Link to post Share on other sites
Temmu 1,931 Posted April 2, 2012 Share Posted April 2, 2012 you have a good point, tushman, i would think that adobe would have an up-to-the-minute current version. and, i like corrine's idea, ftp from adobe - 'cause i hate drive-by crap-ware. Link to post Share on other sites
zlim 1,249 Posted May 4, 2012 Share Posted May 4, 2012 According to an article posted here from ComputerWorld, flash got updated again today for a zero day exploit. http://www.computerworld.com/s/article/9226892/Adobe_patches_new_Flash_zero_day_bug_with_emergency_update?source=rss_latest_content&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+computerworld%2Fnews%2Ffeed+%28Latest+from+Computerworld%29 So what is the ftp link? Link to post Share on other sites
Guest LilBambi Posted May 4, 2012 Share Posted May 4, 2012 (edited) Here ya go Liz: http://www.adobe.com...tribution3.html Not the ftp link but the page to download all versions from one place. EDIT: The .msi installer links on the page above are actually the FTP links! Edited May 5, 2012 by LilBambi noted about the .msi installer links being the ftp links Link to post Share on other sites
Guest LilBambi Posted May 4, 2012 Share Posted May 4, 2012 Corrine, are these links still the same from the March posting here for the FTP or slightly modified? Link to post Share on other sites
Corrine 2,738 Posted May 4, 2012 Author Share Posted May 4, 2012 I've had the information open since 9:00 AM this morning to write a blog post about the Adobe Flash update but got tied up with other tasks. 32-bit ActiveX for Internet Explorer: http://fpdownload.ma...ive_x_32bit.exe 64-bit ActiveX for Internet Explorer: http://fpdownload.ma...ive_x_64bit.exe 32-bit plug-in version for Firefox, Opera, Safari: http://fpdownload.ma...lugin_32bit.exe 64-bit plug-in version for Firefox, Opera, Safari: http://fpdownload.ma...lugin_64bit.exe Reminder: Just because you have a 64-bit OS, it does not mean you need the 64-bit version of Flash Player unless you are using a 64-bit browser. For example, I have 64-bit Windows 7 but use the 32-bit version of IE & FF. (Does FF even have a 64-bit version?) 2 Link to post Share on other sites
Guest LilBambi Posted May 4, 2012 Share Posted May 4, 2012 Thanks Corrine! My posting here on it: Adobe patches new Flash zero-day bug with emergency update – Computerworld I was reading your other posting and didn't make the connection on Windows Live going away until you posted here: Good-bye Windows Live, Hello Microsoft Apps. Thanks for that, Corrine. Link to post Share on other sites
Corrine 2,738 Posted May 5, 2012 Author Share Posted May 5, 2012 Yes, its interesting about Windows Live. In fact, following the branding change from Windows Live to Microsoft Apps, announced on the Building Windows 8 blog, concerns have been raised by bloggers who use Windows Live Writer. There is no mention of Windows Live Writer either in the discussion of the changes or the table included in the announcement. If you are a blogger using Windows Live Writer, sign the petition and include your prefered solution number. Proposed Solutions Solution number 1: Release a metro style app that behaves in the same way as live writer, including its plugin architecture. Solution number 2: Make Live Writer open source, this way the community themselves can keep Live Writer going and keep it fresh. There are no tie-ins with Windows Live ID anymore so no security problems should exist. This solution also keeps alove the huge collection of plugins that have been written for Live Writer which is one of the huge plus points of the software Go to Save Windows Live Writer. (Article on Computerworld by Greg Keizer: Bloggers plead for Windows Live Writer's life) Link to post Share on other sites
Guest LilBambi Posted May 5, 2012 Share Posted May 5, 2012 I don't use it but that is weird. Why would they 'appear' to kill of one of the well used, apparently, programs from the Windows Life suite? And why no word either way when folks are concerned about it. That makes no sense at all. I can understand why people are upset if they are using that program and gotten used to it all this time. Sigh... Maybe they will make Windows Live Writer Open Source... that would explain why they are holding off maybe... Solution #2 would be best overall likely. Link to post Share on other sites
zlim 1,249 Posted May 5, 2012 Share Posted May 5, 2012 Thanks Corrine. I will bookmark the Adobe ftp sites. I managed to grab what I needed last night at MajorGeeks and updated 4 computers running XP and 7. There is a thread at the Adobe forum that I need to study about a hack to get updated flash on a windows 2000 computer. Adobe supported up to 10.1.102.64 on 2K and yet I managed to install 11.1.102.55 on both computers. I don't surf on my 2K computer but I do use it as a test before I update my husband's. I can't seem to wean him off the 2K one and get him to use the XP one attached by the KVM switch on his desk. It has more RAM and runs faster but he insists on firing up the old, slow one. Link to post Share on other sites
goretsky 1,174 Posted May 7, 2012 Share Posted May 7, 2012 Hello, Just in case anyone needs MSI packages for deployment reasons, if you replace the .exe at the ends of those filenames with .msi, you'll download those, instead. Regards, Aryeh Goretsky I've had the information open since 9:00 AM this morning to write a blog post about the Adobe Flash update but got tied up with other tasks. 32-bit ActiveX for Internet Explorer: http://fpdownload.ma...ive_x_32bit.exe 64-bit ActiveX for Internet Explorer: http://fpdownload.ma...ive_x_64bit.exe 32-bit plug-in version for Firefox, Opera, Safari: http://fpdownload.ma...lugin_32bit.exe 64-bit plug-in version for Firefox, Opera, Safari: http://fpdownload.ma...lugin_64bit.exe Reminder: Just because you have a 64-bit OS, it does not mean you need the 64-bit version of Flash Player unless you are using a 64-bit browser. For example, I have 64-bit Windows 7 but use the 32-bit version of IE & FF. (Does FF even have a 64-bit version?) Link to post Share on other sites
securitybreach 11,364 Posted May 8, 2012 Share Posted May 8, 2012 Thanks for the information, somehow I missed this post. Anyway, I guess I am up to date : ╔═ comhack@Cerberus 01:47 PM ╚═══ ~-> pacman -Qi flashplugin | grep Version Version : 11.2.202.235-1 Link to post Share on other sites
V.T. Eric Layton 6,684 Posted May 8, 2012 Share Posted May 8, 2012 That's odd... root_Arch/home/vtel57:# pacman -Qi flashplugin | grep Version error: package 'flashplugin' was not found root_Arch/home/vtel57:# pacman -Ss flashplugin extra/flashplugin 11.2.202.235-1 Adobe Flash Player Link to post Share on other sites
securitybreach 11,364 Posted May 9, 2012 Share Posted May 9, 2012 That's odd... root_Arch/home/vtel57:# pacman -Qi flashplugin | grep Version error: package 'flashplugin' was not found root_Arch/home/vtel57:# pacman -Ss flashplugin extra/flashplugin 11.2.202.235-1 Adobe Flash Player You must have a different version of flash installed although I do not know why as that is from the Community repos. Link to post Share on other sites
V.T. Eric Layton 6,684 Posted May 9, 2012 Share Posted May 9, 2012 Aren't you using Chrome? Maybe that's the diff? Link to post Share on other sites
Guest LilBambi Posted May 9, 2012 Share Posted May 9, 2012 Chrome annoys me sometimes. I get my Flash updates right away and Chrome is always behind! Link to post Share on other sites
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now