Adobe warns of Flash 10.1 security flaw and promises fix

A security flaw in Adobe Flash 10.1 is affecting both desktop (10.1.82.76) and Android (10.1.92.10) versions. As the official advisory doesn’t explicitly state that earlier versions are ok, users should be wary of the sites they visit, and maybe just disable Flash until a fix arrives. Odds are, with the way Flash performs on Android, you won’t miss it all that much.

The critical-rated threat leaves the host device vulnerable to crashes and remote control initiated by hackers.

While we can expect few incidents (Froyo users are still in the minority, and Flash is something you have to manually grab from the market), this shows that the presence of Flash on a platform is not without drawbacks. It’s worth asking if the format brings with it too many complications for a mobile environment.

Tags: , , , ,

Post comment as twitter logo facebook logo
Sort: Newest | Oldest

Still full of security holes?Yeah okay, 10 iterations of Flash FULL of security holes. Get real.

Congrats, enjoy your inferior version of YouTube and flashless internet experience. I sure as hell will keep using it.

I don't even use flash because I joined @YouTube HTML5 beta.

@Saimin: Apple proved, that they don not need flash, to create security holes.@ All: Don't really understand the rage about Flash performance on Android 2.2. It runs great on my HTC Desire since I installed the latest update of Flash. Plus you can set it to "on demand" if you don't want it to run constantly. After all, the 2.2 browser is the fastest mobile browser out there and displays more sites accurately than any other. From MySpace profiles to media gallerys. Why is everybody shouting on this great piece of software? Of course there are things you could do better, but compared to the other products, its simply the best one available. Not long ago, Safari Mobile was the King of mobile browsers and now we have a brand new iPhone 4 that can't even compete with Android devices, that were released month before the IPhone 4!The discussion about Flash itself is just pointless, since Flash IS ALREADY a big part of the internet. Refusing to support it will not change it. We are not talking about a new standard here. We are talking about the web.

Steve Jobs said the iphone will never support Adobe Flash because it is piggy and buggy. Now Adobe has announced that they will only support Flash on high-end Android phones and it is still full of security holes. Just saying.

Disable flash on a phone seems reasonable, but on a desktop? There are many lines of defenses that hacker will need to get through before I would need to disable flash on my desktop/laptop.