Latest 0-Day IE threat?

Easto · Post by **Easto** » Wed Apr 30, 2014 9:01 am

How concerned should I be about this one? I've disabled my Flash plugin and have IE in protected mode.

http://www.fireeye.com/blog/uncategoriz ... tacks.html

Post by **YeOldeStonecat** » Wed Apr 30, 2014 9:24 am

Eh...supposed to be a rather targeted attack....I'm doubting the every day user and most small businesses will be targeted...BUT...gotta stick to caution.

Of course using a much better browser like Chrome....you're safe.

And Microsofts EMET kit will shut off the spots of Internet Exploader that make it vulnerable.

Or there's that quick fix out there to just disable the .DLL that this exploit utilizes.

....or just use Chrome.

Post by **YeOldeStonecat** » Thu May 01, 2014 7:08 am

Adobe released the patch......Flash 13.0.0.206
The exploit hit Flash first, and then Java, and then dug into IE.

Easto · Post by **Easto** » Fri May 02, 2014 8:02 am

MS put their patch out yesterday

Post by **YeOldeStonecat** » Fri May 02, 2014 9:23 am

Yup our N-able server pushed it out to our clients yesterday morning.
The day before...it pushed out the Adobe Flash update.
Love that tool!

Mark · Post by **Mark** » Fri May 02, 2014 5:24 pm

stupid question, but how do i update adobe flash ?

Post by **YeOldeStonecat** » Fri May 02, 2014 7:36 pm

Add/remove programs or Programs and Features....look for Adobe Flash...uninstall all existing instances.
Go to http://www.adobe.com scroll down, lower right corner...Flash...follow the yellow brick road. Opt out of the added junkware, select "auto update" so you don't have to worry about this again.

If you have a fairly recent version of Flash, installing the latest will remove the old one (similar to Java). But if you have a REALLY old version of flash..it won't remove really old versions (again...similar to Java).

Mark · Post by **Mark** » Fri May 02, 2014 7:49 pm

YeOldeStonecat wrote:Add/remove programs or Programs and Features....look for Adobe Flash...uninstall all existing instances.
Go to http://www.adobe.com scroll down, lower right corner...Flash...follow the yellow brick road. Opt out of the added junkware, select "auto update" so you don't have to worry about this again.

If you have a fairly recent version of Flash, installing the latest will remove the old one (similar to Java). But if you have a REALLY old version of flash..it won't remove really old versions (again...similar to Java).

thanks cat, got the latest version installed now