We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Shockwave bug is critical, Adobe warns

Hacker shares details of bug on Twitter

Adobe warned Thursday of a critical bug in its Shockwave Player that affects both Windows and Macintosh PCs.

The bug, which was publicly disclosed Thursday, "could cause a crash and potentially allow an attacker to take control of the affected system," Adobe said in a message on its website.

In its security advisory, Adobe said it considers the issue "critical," and is working on a patch for the flaw. The company isn't saying when that patch will ship, however.

So far, there aren't any reports of attacks that leverage the bug, but this type of public disclosure of a serious bug is often a harbinger of future attacks.

Adobe's Reader software has been a regular target for Web-based attacks over the past year, and while the Shockwave Player is used by about half as many people as Reader, it's probably good enough for many hackers.

"Hundreds of millions of computers with Internet connectivity have Shockwave installed, so, this will obviously be an attractive target for attackers," security vendor Symantec said Thursday in an e-mailed statement.

If attacks do become a problem, users can disable Shockwave in their Web browsers until a patch becomes available.

The bug was found by Shahin Ramezany, a security researcher who said he released details of the problem to celebrate the fact that he now has 1,000 followers on Twitter. He had earlier promised to release an Adobe 0day when he crossed that threshold.


IDG UK Sites

Best January sales 2015 UK tech deals LIVE: Best New Year bargains and savings on phones, tablets,...

IDG UK Sites

Chromebooks: ready for the prime time (but not for everybody)

IDG UK Sites

Hands-on with Sony's latest smartglasses

IDG UK Sites

Apple TV expert tips: get US Apple TV content, watch Google Play, use multiple Apple IDs and more