Adobe patches latest Flash zero-day

15.04.2011
Adobe today patched a critical vulnerability in Flash Player that the company said criminals were already exploiting with malicious Microsoft Word and Excel documents.

On Monday, , said exploits were circulating, and promised to fix the flaw with an emergency update.

Today's update was Adobe's in less than four weeks.

The new version, Flash Player 10.2.159.1, is available for Windows, Mac, Linux and Solaris.

Missing from that list is Android, the Google mobile operating system that also runs Flash. A fix for the same flaw will be issued to Android users no later than the week of April 25, said Adobe.

Adobe will patch the popular PDF viewer Adobe Reader that same week. The Flash vulnerability also exists in Reader and the more advanced Acrobat because both include code that renders Flash content embedded in PDF files.