Adobe Flash Player 10.3.181.23
/ 4
Adobe has released 'Adobe Flash Player version 10.3.181.23' which fixes an important vulnerability which has been identified in Adobe Flash Player 10.3.181.16 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.22 and earlier versions for Android. This universal cross-site scripting vulnerability (CVE-2011-2107) could be used to take actions on a user's behalf on any website or webmail provider, if the user visits a malicious website. There are reports that this vulnerability is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message.
Adobe recommends all users of Adobe Flash Player 10.3.181.16 to upgrade to the newest version 10.3.181.22 for Plugin based browsers and 10.3.181.23 for ActiveX based browsers (Internet Explorer).
To verify the Adobe Flash Player version number installed on your system, access the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe (or Macromedia) Flash Player" from the menu:
If you use multiple browsers, perform the check for each browser you have installed on your system.
Adobe has two different MSI packages available for download. One MSI, full_flashplayer_win_msi, is targeted for Internet Explorer users. The other one, full_flashplayer_win_pl_msi, is targeted for Pluged-in based browsers like Firefox.
Adobe also has the 'Adobe Flash Player Administration Guide for Flash Player 10.1' which describes the administration of Flash Player 10. How it's installed, how it works, and how you can control it to suit the needs of a specific network environment. This document is intended for IT or administrative professionals who manage the installation or use of Flash Player for multiple users in a controlled environment. The Adobe Flash Player Administration Guide contains chapters which cover the Flash Player environment, installation of the Player, Administrator settings, User-configured settings and Security considerations. You can download it here.
It also contains information about a configuration file called mms.cfg with which can you switch off the AutoUpdate feature. The mms.cfg can be added to a transform file for this MSI and then be included in the installation:
