Security Update Time Again

Adobe has been busy the last couple weeks fixing security holes in both Flash Player and Acrobat Reader and patches for both products were just released. Take a minute to update your system to keep yourself safe. Additionally, if you use Adobe AIR they also recommend that you update that as well.

For Flash Player you need to be running version 10.0.32.18 no matter what operating system your using. To find out what version of flash player your running check this page. If your not running the latest download it from Adobe here. Remember, no downloading from any old web site, get it right from the source.

One thing to consider is that if you run Windows and you use Firefox, Opera, Chrome, or Safari as your primary browser you will need to download the update for those and then go back and do the upgrade for Internet Explorer. You get the same version it’s just that IE and the other browsers use different update mechanisms.

To update Adobe Acrobat start it up and select the “Help” menu item then “Check for Updates.” It should automagically update itself and when done you should be running version 9.1.3. If your running version 8, or heaven forbid 7 or even older, you might have to download the full 9.1.3 version instead of using the using the update feature.

If you have Adobe AIR installed you can find the update on Adobe on this page. Your chances of running this are a lot smaller and you would probably know if you have it. It’s used as a platform to create applications that run on Windows, Mac, and Linux boxes without the programmer having to worry too much about your specific system. If you download an app from the web that requires AIR it will automatically install it for you. If your curious and want to find out if you have this, on Windows box you can go to the “Control Panel” and select “Add or Remove Programs”. It will show up in the program list as “Adobe AIR”.

Adobe Flash and Acrobat Upgrades

A couple of months back I installed Google Analytics on the web site as an experiment. Analytics collects various information about who visits the site, what browser you use, what pages you visit, if you got here via a search engine what search terms got you here, and other interesting stuff. I’m an information junkie and love sifting through this type of information.

One of the things it reports is the version of Adobe’s Flash Player installed. Since I work with computers and try and keep with the latest goings on in the security front I feel I need to tell you it’s time to update your flash player.

Why does it matter you might wonder? Virus writers and purveyors of spyware exploit vulnerabilities in software that lots of people use. Things like Flash Player, Acrobat Reader, Internet Explorer, Windows, etc. A couple of weeks back Adobe released an update to Flash to address a vulnerability Players 10.0.12.36 and earlier which can allow attackers to take complete control of the affected machine.

Based on my Google Analytics results 93% of users visiting here in the last two weeks are running outdated flash versions. Nine different versions in fact.

How can you figure out what version of flash your running? Go to Adobe’s web site at the following link:
http://www.macromedia.com/software/flash/about/

and it will show you the version you have installed. Here’s a screen shot:

If the version you have installed doesn’t match the version you should be running then upgrade from the following link:
http://get.adobe.com/flashplayer/

The installation should be pretty straight forward. I use Firefox and my install was to download the install program, close my browser and run the installation. Once you have upgraded go back to the about web site and verify that your installed version has been upgraded.

This is also where I warn you never to install flash from any web site other then Adobe. If you surf your way onto a site that tells you your running an old version of flash don’t believe them, check with the official Adobe site and verify. A very popular phishing technique is to tell you your running an old version and provide you with a convenient download to upgrade but it’s actually just spyware. Any reputable site will direct you to Adobe’s site to get the correct version if you really are running and outdated version.

Once you’ve upgraded flash go ahead and upgrade Adobe’s Acrobat reader if you use it for reading pdf files. On Wednesday they released version 9.1 which fixes a number of critical vulnerabilities . You can get that here:
http://get.adobe.com/reader/