Flash vulnerability exposure for 16 months adobe apology

Adobe recently made a public apology for a 16-month flash flaw, although Adobe provided four upgrades to flash, but the vulnerability was fixed after 16 months after the leak was released in Flashplayer10.1beta, which was released at the end of November.

Security researcher Matthewdempsky disclosed the Vulnerability (JIRAFP-677) in the Adobe Bug database for the first time on September 22, 2008, causing IE6, IE7, Firefox, and Safari3 to crash. This vulnerability may not cause other browsers to crash but will cause flash to be unresponsive.

Emmyhuang, the Adobeflashplayer product director, admitted in an official blog that while the loophole had been repaired in Flashplayer10.1beta, the job should have been done long ago.

"FlashPlayer10 was released in October 2008, so when this vulnerability was reported, we basically locked the code to prepare the new release." Our mistake led to this vulnerability also involved the next generation of flash products, that is, later this year will be released FlashPlayer10.1, in fact, in the FLASHPLAYER10 should be the flaw in the draw terminator. ”

We extend our heartfelt apologies for this. ”