Adobe plugs holes in Flash Player and ColdFusion

On Tuesday, Adobe patched four vulnerabilities affecting its popular Flash Player software and ColdFusion web application server.

Security updates for Flash Player addressed two critical vulnerabilities that could cause the software to crash and potentially allow a saboteur to take control of an exploited system, Adobe revealed in a bulletin.

In addition, a “hotfix” rectifying two flaws in ColdFusion was released, plugging a cross-site scripting (XSS) vulnerability that could be exploited by a remote authenticated attacker, and another bug that could give an unauthorized user remote read access.

The ColdFusion update impacts versions 9 and newer running on Windows, Macintosh and Linux. Adobe Flash Player 11.9.900.117 and earlier versions for Windows and Macintosh received updates, as well as Adobe Flash Player 11.2.202.310 and earlier versions for Linux.