Adobe has published a security bulletin that has confirmed a serious vulnerability in all forms of its popular Flash products across multiple platforms that it is offered for. The vulnerability exists in the Windows, Linux, and Mac products and Adobe says that it knows that an exploit targeting the vulnerability has been published to the public.
Adobe has announced that it intends to patch the vulnerability that the exploit takes advantage of today, July 8, 2015. The vulnerability is known as the Adobe Flash security hole CVE-2015-5119 and it was discovered by security researchers who were digging through data leaked from the Hacking Team.
The Hacking Team is an Italian security firm known for providing surveillance software that allows governments to hack digital devices and monitor the digital activates of people. The leaked data was ironically published after the Hacking Team was hacked this week.
Adobe says that the vulnerability is currently not being exploited in the wild. Hackers that successfully take advantage of the vulnerability could cause target systems to crash and potentially allow the hacker to take control of the affected system. Versions of Flash affected by the vulnerability include Flash Player 18.104.22.168 and earlier for Windows and Mac, Flash Player Extended Support Release version 22.214.171.1246 and earlier 1.3x versions for Windows and Mac, and well as Flash Player 126.96.36.1998 and earlier for 11.x versions for Linux.
SOURCE: Venture Beat