LandzDown Forum

Security => Security Alerts & Briefings => Topic started by: Corrine on January 10, 2017, 03:59:46 PM

Title: Adobe Flash Player and AIR Critical Security Updates Released
Post by: Corrine on January 10, 2017, 03:59:46 PM
Adobe has released Version 24.0.0.194 of Adobe Flash Player for Microsoft Windows, Macintosh, Chrome and Linux.

These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. 

Edit Note:  The old direct download links for NPAPI (Firefox, Pale Moon) and ActiveX Plugin are not currently working.  In addition, Opera/Chromium-based browsers now use the Pepper/PPAPI plugin.  The updated links are below.  The local offline installers are also available at the bottom of this page: https://helpx.adobe.com/flash-player/kb/installation-problems-flash-player-windows.html (https://helpx.adobe.com/flash-player/kb/installation-problems-flash-player-windows.html)

If you use the download center, uncheck any unnecessary extras.
Release Notes:  Flash PlayerÃ,® 24 AIRÃ,® 24 (https://helpx.adobe.com/flash-player/release-note/fp_24_air_24_release_notes.html)
Security Bulletin (https://helpx.adobe.com/security/products/flash-player/apsb17-02.html)
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: plodr on January 10, 2017, 04:05:05 PM
Thanks!

Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: plodr on January 10, 2017, 04:59:43 PM
I downloaded only to discover that I got the same version that was installed in Dec. 24.0.0.186

The newest version should be 24.0.0.194
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: MikeW on January 10, 2017, 06:37:01 PM
None of the links work for me
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: Corrine on January 10, 2017, 11:19:12 PM
I have Pale Moon settings to automatically update Flash Player.  That way, if I should get distracted and not update manually, I'll still get the latest version.

Mike, did you try the FTP links I added with the Edit note?
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: plodr on January 10, 2017, 11:20:38 PM
I used this for FF http://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player.exe
it downloaded fine and I installed it on 4 Win 7 computers.

Not sure what I'm going to do for IE yet.
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: Corrine on January 11, 2017, 02:09:49 AM
For IE you need the activex:  http://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player.exe

Updating the initial post.
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: plodr on January 11, 2017, 03:41:32 PM
Corrine, your link gives me a 19.4MB plugin file and not the 18.9MB activex file.
It's not the correct file.

Just to be sure I downloaded the FF file again and it named it (1) so it is the same file as the supposed IE file.
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: plodr on January 11, 2017, 03:56:21 PM
Just to clarify
QuoteEdit Note:  The old direct download links for the NPAPI Plugin are not currently working.  The FTP link to use is http://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player.exe.

Also note the addition of the FTP download link for Opera/Chromium-based browsers:  https://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player_ppapi.exe

The FTP link for IE (activex):  http://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player.exe
you are showing the same link for FF and IE.
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: Corrine on January 11, 2017, 03:56:41 PM
Sorry, I had the right link for IE but who knows what I did to end up with the wrong one.  Try this, when I clicked the link, it indicated it is 18.9 MB:  http://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player_ax.exe

Now I'll recheck the NPAPI.  Too much edit yesterday.  :D
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: plodr on January 11, 2017, 04:49:02 PM
THANKS! That's the one I needed.  ;D

Now flash will be patched in IE as well as FF.
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: winchester73 on January 11, 2017, 04:53:20 PM
You can always find the local offline installers at the bottom of this page: https://helpx.adobe.com/flash-player/kb/installation-problems-flash-player-windows.html

I downloaded/installed the Flash Player for Firefox - NPAPI without any difficulties.
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: Corrine on January 11, 2017, 05:04:21 PM
I'm having absolutely no luck finding an FTP link specific for NPAPI.  Each and every one points to the 19.4 binary file (which is also what is provided as the offline installer at the link Winchester posted, https://fpdownload.macromedia.com/pub/flashplayer/latest/help/install_flash_player.exe) rather than the plugin. 

So, it appears that for Firefox/Pale Moon it will either be a trip to the download site and UNchecking the extras, setting the Flash Player Settings Manager Update tab to "Allow Adobe to install updates", or using either the FTP link or the offline install link for the binary rather than the plugin for each update.
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: DR M on January 11, 2017, 05:55:01 PM
Quote from: Corrine on January 11, 2017, 05:04:21 PM
I'm having absolutely no luck finding an FTP link specific for NPAPI.  Each and every one points to the 19.4 binary file (which is also what is provided as the offline installer at the link Winchester posted, https://fpdownload.macromedia.com/pub/flashplayer/latest/help/install_flash_player.exe) rather than the plugin. 

So, it appears that for Firefox/Pale Moon it will either be a trip to the download site and UNchecking the extras, setting the Flash Player Settings Manager Update tab to "Allow Adobe to install updates", or using either the FTP link or the offline install link for the binary rather than the plugin for each update.

Questions  :)  :

What is FTP link?
What is the difference between binary file and plugin?

I also use the links in the page Winchester posted above. Are they missing something?
Title: Re: Adobe Flash Player and AIR Critical Security Updates Released
Post by: plodr on January 11, 2017, 07:42:52 PM
Corrine, I grabbed FF yesterday from this link and it should be 19.4MB
http://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player.exe

Today I grabbed IE from this link 18.9MB
http://fpdownload.adobe.com/get/flashplayer/pdc/24.0.0.194/install_flash_player_ax.exe

I'm not sure about chrome and opera regarding size because I have neither browser installed on any Windows computer.
https://fpdownload.macromedia.com/pub/flashplayer/latest/help/install_flash_player_ppapi.exe

Thanks for that page Winchester73.

I went to the download flash and in the first pane clicked where it said Need for another computer. All it did was try to install a small stub on the current computer which already had an updated flash on it.

I'll also mention that I've used the 19.4MB file and the 18.9MB file to update flash in FF and IE on four Windows 7 computers. I fired up both FF and IE to check that the correct version ending in 194 was installed.