Adobe releases emergency patch for Windows and OS X systems

Adobe on Thursday updated Flash Player to patch two zero-day vulnerabilities that hackers were already using to hijack Windows PCs and Macs. Adobe recommends all users to update their systems as soon as possible.

The first vulnerability, CVE-2013-0633, tricks users into downloading a Microsoft Word document sent via e-mail. The document contains malicious SWF (flash's file extension) content that can then infect a user's system. This exploit targets the ActiveX version of Flash Player for Windows, Adobe said.

The second vulnerability, CVE-2013-0634, has been used in a similar fashion against Windows targets, but has also been exploited during "drive-by" attacks against Firefox and Safari users on the Mac, said Adobe. A drive-by attack requires only that a victim be duped into browsing to a malicious website hosting an exploit.

"Adobe is aware of reports that CVE-2013-0633 is being exploited in the wild in targeted attacks designed to trick the user into opening a Microsoft Word document delivered as an email attachment which contains malicious Flash content," the company stated in an advisory.

Read more -here-