Adobe released an out-of-band patch for its Flash Player, patching a vulnerability being exploited in the wild. The vulnerability, CVE-2014-0497, allows an attacker to remotely inject code and take control of the underlying system hosting Flash. Adobe Flash Player version 12.0.43 and earlier for Windows and Mac are affected as is 11.2.202.202 and earlier on Linux. The vulnerability was reported by Kaspersky Lab researchers Alexander Polyakov and Anton Ivanov.
Source: https://threatpost.com/emergency-adobe-update-patches-flash-zero-day/104044/

