Adobe Flash patched on 10/26/16 for another 0-day exploit

Wiz Feinberg · Post by **Wiz Feinberg** » 26 Oct 2016 8:10 pm

For the second time in this month Adobe has released a patched version of its weary and vulnerable Flash Player. This time the out of band patch plugs a zero day exploit in the wild that has been targeting users of all personal computer operating systems that have Flash installed.

The vulnerability affects Windows, Linux and Mac desktop versions of Flash 23.0.0.185 and earlier, as well as Flash Player for Google Chrome, and Microsoft Edge and Internet Explorer on Windows 10 and 8.1.

Adobe said the flaw is a use-after-free vulnerability, and that users should update to version 23.0.0.205 on all platforms.

See more at: Adobe Patches Flash Zero Day Under Attack https://wp.me/p3AjUX-vCL

My solution was to uninstall Flash Player from my Windows 10 PC. Unfortunately, it remains intact in Google Chrome and Microsoft Edge browsers. One has to manually disable Flash from running in those browsers.

To disable Flash in Edge, click the menu button in Edge and select Settings. Scroll down to the bottom of the Settings panel and click “View advanced settings.” Set the “Use Adobe Flash Player” slider to “Off.”

To disable Flash in Chrome, type chrome://plugins/ into Google Chrome’s location bar and press Enter. Click the “Disable” link under the Adobe Flash Player plug-in.

Scott Duckworth · Post by **Scott Duckworth** » 27 Oct 2016 3:02 am

I fixed mine... gave it the boot, and run Flash Block on Firefox. No more problems.

I just wish the Flash Block add ons wouldn't block HTML5 videos also.

Dave Potter · Post by **Dave Potter** » 27 Oct 2016 4:05 am

Scott Duckworth wrote:I fixed mine... gave it the boot, and run Flash Block on Firefox. No more problems.

What with all the rest of the security issues we face daily on the internet, this is one I can do without, so it's gone from my system now too.

But your comment confuses me. If Flash is absent from your system, why would you need an add-on to block Flash content that requires the missing Flash component to run?

Scott Duckworth · Post by **Scott Duckworth** » 27 Oct 2016 5:00 am

Just make I don't get a scam that auto installs Flash. And, I'm on Sat internet, so I don't want videos running I don't want to watch.

Charlie McDonald · Post by **Charlie McDonald** » 27 Oct 2016 5:10 am

Thanks, Wiz; easily disabled.

Tony Prior · Post by **Tony Prior** » 31 Oct 2016 2:09 pm

Although I use Chrome for my primary browser, for the programs that got messed up with Flash Player ( now disabled in Chrome) I use IE.

After few attempts to fix it with new downloads I found it to be more of a PITA than it was to try to get it going again.

The one program that needs it runs just fine under IE and I don't use it that often.