Adobe Flash Player updates confront zero-day exploit

(Phys.org) —An Adobe Flash exploit has targeted three sites. Adobe Systems on Thursday announced knowledge of the exploit and what steps to take. The company assigned the CVE identifier CVE-2014-0502 to the vulnerability. Its security bulletin addressed updates for Adobe Flash Player in response to the zero-day exploit, responding to the incidents. Titled "Security updates available for Adobe Flash Player," the company said that "Adobe is aware of reports that an exploit for CVE-2014-0502 exists in the wild, and recommends users update their product installations to the latest versions," which were listed. The attack, described as a zero-day Adobe Flash exploit, was discovered on February 13 by Milipitas, California- based security company FireEye.