We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
78,230 News Articles

Google first to patch Flash bug with Chrome update

Patches flaw a week before rival browsers

Google has updated its Chrome browser, patching a flaw in the browser's copy of Flash Player.

The move enables Chrome to beat rival browsers to the punch: users of Internet Explorer (IE), Firefox, Safari and Opera won't receive a Flash update from Adobe until next week.

This week, Adobe announced that attackers are exploiting an unpatched, or 'zero-day', vulnerability in Flash Player using malicious Microsoft Excel documents attached to email messages. Adobe said it would patch Flash Player for Windows, Mac OS X and Linux sometime next week, but did not put a date on the calendar.

Google pushed a Chrome update to users running the stable and beta builds of the browser.

"This release contains an updated version of the Adobe Flash player," Jason Kersey, a Chrome program manager, said in a blog.

After updating Chrome to version 10.0.648.134, the browser reports that it's running Flash Player 10.2.154.25, a step up from the 10.2.154.18 bundled with the last update of the browser.

Adobe confirmed today that Chrome's integrated copy of Flash includes the patch for the zero-day vulnerability.

"As part of our collaboration with Google, Google receives updated builds of Flash Player for integration and testing," said Adobe spokeswoman Wiebke Lipps. "Once testing is completed for Google Chrome, the release is pushed via the Chrome auto-update mechanism."

Adobe is still testing the patched Flash Player across its full list of supported platforms, which range from Windows and Mac OS X to Linux and Android, Lipps said.

Google has been including fixes for Flash Player in its Chrome updates since April 2010. Chrome is the only browser to automatically update Flash Player with its own patch mechanism.

Chrome users have got the jump on others before when it comes to Flash fixes. Last September, for example, Google updated the browser, and delivered a patched Flash Player, three days before Adobe.

Chrome 10.0.648.134 with the patched Flash Player can be downloaded can be downloaded for Windows, Mac OS X and Linux from Google's website. Users already running the browser will be updated automatically.

See also: Google patches Pwn2Own WebKit bug in Chrome


IDG UK Sites

OnePlus Two release date rumours: Something's happening on 22 July

IDG UK Sites

13in MacBook Air review, Apple's MacBook Air 2014 reviewed

IDG UK Sites

5 reasons to buy an electric car and 5 reasons not to

IDG UK Sites

Evernote Skitch: the best way for creatives to doodle feedback