latest updates from easySERVICE™
The vulnerable versions are 188.8.131.52 and earlier versions for Windows; 184.108.40.206 and earlier versions for Macintosh; and 220.127.116.110 and earlier versions for Linux. These same versions embedded in Internet Explorer 10 and 11 and in Google Chrome will be updated automatically through those products’ update mechanisms.
The new versions are 18.104.22.168 for Windows and Mac and 22.214.171.1246 for Linux.
This attack and update are unrelated to the zero day IE vulnerability just disclosed, the attack for which uses a Flash .SWF file as an attack vector. In that case no vulnerability has been indicated in Flash itself.
The vulnerability, which will be designated CVE-2014-0515, was reported to Google by Alexander Polyakov of Kaspersky Labs.
Source: Associated Press