Flash Player 11.8.800.168

In navolging van Microsoft heeft producent Adobe een maandelijkse patch tuesday (pleister dinsdag) ingesteld voor zijn Flash Player. Op deze dag verschijnen elke maand beveiligingsupdates voor lekken in de veelgebruikte Flash-plugin.

Flash Player 11.8.800.168 voor Windows en Mac OS X is een beveiligingsupdate die vier lekken dichtplakt. Deze kwetsbaarheden omvatten geheugencorrupties die door internet criminelen kunnen worden uitgebuit om willekeurige code op een pc uit te voeren. Alle vier lekken zijn ontdekt door het Google Security Team, waar Adobe nauw mee samenwerkt.

Verder zijn nog diverse fouten opgelost en prestatieverbeteringen doorgevoerd - met name in de ingebouwde Flash-plugin in Google Chrome en de HTTP Live Streaming mogelijkheid. Lees alle details hieronder.

Op deze pagina kun je - voor elke browser - controleren welke versie van de plugin je hebt.

Flash Player 11.8 kun je los downloaden voor Windows en Mac OS X of updaten via de automatische updater. In Google Chrome is de Flash-plugin ingebouwd, die hoef je voor Googles browser dus niet apart te downloaden. Er zijn vandaag ook beveiligingsupdates voor de Linux-versie en Android-variant van Flash Player uitgebracht.

Uitgave opmerkingen:
These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2013-3361, CVE-2013-3362, CVE-2013-3363, CVE-2013-5324).

• 3587773 - [External bug][iOS]Creating too many FileStream objects will cause app to crash on iOS
  
• 3601024 - [Safari OS X 10.9] - File Downloads now work
• 3611679 - [HTTP Live Streaming] [WebVTT] - Caption colors now render correctly
• 3507613 - [Win7 IE10] - A Microsoft update to Internet Explorer corrects the following issue: Mouse movement interferes with Flash Player display updates
• 3575123 - [Mac][FullScreen, MouseLock] - Corrects an issue where when the mouse movement values for a given frame were identical to the values of the preceding frame, the values returned would be zero
• 3609793 - [Chrome] - Improved Audio Latency path is enabled by default
• 3507613 - [Internet Explorer 10] [Win7] - An update to IE10 resulted in an improvement where instantiating an ActiveX Flash Player instance in IE 10 using a Windowless Mode (opaque or transparent) now works
• 3597568 - [MacOS 10.9] - Mavericks Developer Preview 3 corrects an issue where Flash Player configuration files were not readable by Flash Player
• 3604526 - [IME CCJK] - The IME candidate window position no longer moves to the left when the composition string extends beyond a single line in a textfield
• 3583135 - [HTTP Live Streaming] [WebVTT] - Changing the options on a caption no longer erroneously resets that caption's position
• 3602519 - [Chrome] [PPAPI] - Video on NYTimes.com now plays correctly
• 3609793 - [Chrome] [PPAPI] - Audio latency improvements are enabled by default
• 3613819 - [iOS7] [AIR]- Using Sound.play app asks permission for accessing the Microphone even when microphone API is not used in the app
• 3587452 - [Android] [AIR] - 144x144 image size icon should be supported on android
• 3570724 - [Flash Access] - Ability to specify a shorter timeout for license response
• 3580139 - [Chrome] [PPAPI] [Mac] - screen.yahoo.com - video playback stopped after exiting full-screen mode
• 3580607 - [Chrome] [PPAPI] - Resolves video jitter after exiting fullscreen mode on an embedded YouTube video
• 3572762 - [HTTP Live Streaming] [Web VTT] - A stream with WebVTT captions now plays all of the captions available in a stream
• 3572767 - [HTTP Live Streaming] [Web VTT] - Captions are no longer erroneously broken across multiple lines
• 3577355 - [HTTP Live Streaming] [Web VTT] - Captions are now displayed when seeking backwards in a video stream
• 3577367 - [HTTP Live Streaming] [Web VTT] - Caption customizations are now displayed on the correct frame
• 3583137 - [HTTP Live Streaming] [Web VTT] - Captions are now displayed with the correct font weight
• 3586532 - [HTTP Live Streaming] [Web VTT] - Ampersand, Less Than and Greater Than cue escape characters are now correctly displayed
• 3583922 - [Internet Explorer] - ExternalInterface now works correctly in instances where SWF content was embedded using only the tag.
• 3599625 - [Internet Explorer] - Fullscreen Mode now works correctly on https://apps.faceboo...
• 3582320 - [Win8] [ARM] - Flash video now appears as expected on http://www.orange.fr
• 3600931 - [Win8] - Playback Controls are now rendered correctly on http://www.cnn.com/v...
• 3590934 - [Win8] [Firefox] - When the Windows display settings are zoomed to 150%, the right-click context menu in Flash Player now works correctly
• 3606308 - [Android][SecureSocket] [AIR] - Application getting crash when trying to connect with host contains SSL certificate.
• 3077653 - [iOS] [AIR] - Creating too many FileStream objects will cause app to crash on iOS.
• 717340 - [Mozilla] [Mac] [Dual Monitor] - Fixes an issue where the Cursor disappeared when moving from Full-Screen video in the second display to Firefox/Safari in the primary display.
• 3560721 - [iOS] [AIR] - Application crashes having Microphone running for 10 to 20 mins
• 3572885 - [Android] [AIR] - 'orienattionChange' event is not fired when Stage rotated through setOrientation() method
• 3554585 - [Android] [AIR] - Stage is blank in GPU mode because of rotationY property
• Multiple stability and security fixes