Sign up for our Technology Newsletter 
Adobe Patches Security Holes in Flash
Comments Off on Adobe Patches Security Holes in Flash
Adobe has released a security update for Flash Player in order to address several critical vulnerabilities, including one that is being exploited in the wild.
The Flash Player 10.3.183.10 for Windows, Mac and Linux, and Flash Player 10.3.186.7 for Android, contain patches for six security flaws.
One of them is a cross-site scripting (XSS) weakness that can be exploited to execute rogue actions on behalf of web sites or webmail providers if victims click on maliciously-crafted links.
“There are reports that this issue is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message,” Adobe warns in its security advisory.
XSS vulnerabilities are the result of improper user input validation and allow attackers to execute rogue code in the context of the current web site. For example, they can be leveraged to extract session cookies or load rogue forms into legitimate pages, which makes for very credible phishing attacks.
Adobe credits Google for reporting this cross-site scripting vulnerability, which is identified as CVE-2011-2444. This means it might have been detected in attacks against Gmail users.
Two other patched vulnerabilities allow for arbitrary code execution and are located in the AVM stack. One of them can also lead to a denial of service condition. Two remote code execution logic errors and a Flash Player security control bypass have also been addressed.
Users should deploy the new update as soon as possible because browser plug-ins like Java, Adobe Reader or Flash Player are amongst the most attacked pieces of software one can have on a computer. However, unlike Adobe Reader X (10.0) which features sandboxing technology, Flash Player doesn’t have any anti-exploitation mechanism built-in.
Flash Player 11 Launched With 3D Gaming
Comments Off on Flash Player 11 Launched With 3D Gaming
Adobe Systems announced Flash Player 11 and Adobe Air 3 software Wednesday to assist developers in building more sophisticated applications with dozens of new features across smartphones and tablets as well as desktop computers.
The releases are Adobe’s biggest in two years, and will be available free of charge in early October, said Anup Murarka, Adobe’s director of product marketing. The related tools, Flash Builder and Flex, will support new features in Flash Player 11 and Adobe Air 3 by the end of the year.
The releases will enable delivery of 2D and 3D games over the Internet to various devices, Murarka said. Developers of enterprise applications will also find the 3D capabilities popular for data-centric apps. Enterprises, for example, will be able to build application dashboards to “visualize complex data sets” with 3D images, he said.
Developers will also be able to use the tools to more deeply integrate business software like Excel and Outlook in devices and to access hardware programming interfaces for functions such as Near-Field Communication being used more widely in smartphones, Murarka said.
The new versions will also help developers build more secure applications with the ability to leverage cryptographically secure random number generation, he said.
Nokia Puts Free M$ Apps On Symbian Phones
September 15, 2011 by admin
Filed under Smartphones
Comments Off on Nokia Puts Free M$ Apps On Symbian Phones
Several of Microsoft’s business productivity applications will be available free of charge on Nokia’s latest Symbian Belle smartphones later this year, Nokia stated Thursday.
The move comes at the same time Nokia is developing its first smartphone on the Windows “Mango” Phone platform. That phone is rumored to be scheduled for a November debut.
The free apps will run on Symbian Belle smartphones announced in August; they’re designed to keep customers buying Nokia products while Nokia ramps up to Windows Phone smartphones.
The free apps for Symbian Belle phones will include: Microsoft PowerPoint Broadcast for broadcasting presentations from a desktop to a smartphone;Microsoft OneNote for taking notes with images by syncing with Microsoft SkyDrive;And Microsoft Document Connection, which provides a single view of documents stored on a smartphone including email attachments and documents on Microsoft SharePoint 2010 sites.
Early next year, Nokia said it will provide OneNote synchronization with SharePoint and will add Word, Excel and PowerPoint as native applications for the first time outside the Windows platform.
Some critics of Nokia’s partnership with Microsoft wonder how successful Windows Phone Mango (version 7.5) will be and said the addition of Microsoft apps to Nokia’s older Symbian line is a way for Nokia to hedge its bets if the Microsoft partnership doesn’t pay off quickly.
The free productivity apps could also be a way to introduce a large number of Symbian users to Microsoft software. There are many more Symbian users outside the U.S. than inside and Symbian until this year had been the world’s largest smartphone platform.
Making the free apps available on the Symbian Belle phones doesn’t cost either company much and the Belle phone users “get something to sweeten the deal to stay with symbian,” Gold said.