Adobe’s First Patch Tuesday of 2014

14 Jan 2014

minute read

Authors

Roel Schouwenberg

This month’s Adobe Patch Tuesday release sees fixes for Flash Player, Acrobat and Reader. All vulnerabilities get the highest priority rating. This means future exploits are likely.

The Flash Player bulletin was only announced today. CVE-2014-0491 and CVE-2014-0492 both concern remote code execution vulnerabilities.

CVE-2014-0493, CVE-2014-0495 and CVE-2014-0496 affect Acrobat and Reader. These CVEs also concern remote code execution vulnerabilities. All of this month’s vulnerabilities were reported to Adobe directly.

Given the severity of the vulnerabilities we recommend applying these patches as soon as possible.

Authors

Roel Schouwenberg

Adobe’s First Patch Tuesday of 2014

Latest Posts

Latest Webinars

Reports

Kaspersky shares insights into the activity and TTPs of the BlindEagle APT, which targets organizations and individuals in Colombia, Ecuador, Chile, Panama and other Latin American countries.

Kaspersky has identified a new EastWind campaign targeting Russian organizations and using CloudSorcerer as well as APT31 and APT27 tools.

The report features the most significant developments relating to APT groups in Q2 2024, including the new backdoor in Linux utility XZ, a new RAT called SalmonQT, and hacktivist activity.

Kaspersky discovered a new APT CloudSorcerer targeting Russian government entities and using cloud services as C2, just like the CloudWizard actor.

Adobe’s First Patch Tuesday of 2014

GReAT Ideas. Balalaika Edition

GReAT Ideas. Green Tea Edition

GReAT Ideas. Powered by SAS: malware attribution and next-gen IoT honeypots

GReAT Ideas. Powered by SAS: threat actors advance on new fronts

GReAT Ideas. Powered by SAS: threat hunting and new techniques

ZeroLocker won’t come to your rescue

A Post-PC BlackHat?

Adobe Updates April 2014

Trust. Trust. Trust

Adobe Security Updates December 2013

QakBot attacks with Windows zero-day (CVE-2024-30051)

In search of the Triangulation: triangle_check utility

How to train your Ghidra

OpenTIP, command line edition

Extracting type information from Go binaries

Latest Posts

Tropic Trooper spies on government entities in the Middle East

Mallox ransomware: in-depth analysis and evolution

A deep dive into the most interesting incident response cases of last year

IT threat evolution in Q2 2024. Non-mobile statistics

Latest Webinars

Inside the Dark Web: exploring the human side of cybercriminals

The Cybersecurity Buyer’s Dilemma: Hype vs (True) Expertise

Cybersecurity’s human factor – more than an unpatched vulnerability

Building and prioritizing detection engineering backlogs with MITRE ATT&CK

Reports

BlindEagle flying high in Latin America

EastWind campaign: new CloudSorcerer attacks on government organizations in Russia

APT trends report Q2 2024

CloudSorcerer – A new APT targeting Russian government entities

Subscribe to our weekly e-mails