Out-of-band Adobe security update
On December 28, 2015, Adobe published security bulletin APSB16-01 and related security patches, which originally were scheduled to be released in January 2016.
The patches fix multiple issues, including an integer overflow vulnerability in Adobe Flash Player (CVE-2015-8651), which has been exploited in the wild.
Dell SonicWALL has released a signature to detect and block exploitation attempts targeting this vulnerability. The signature is listed below:
- ANTISPY sid:4221 “Malformed-File swf.MP.360”
Adobe’s decision to release the patches earlier is creditable since shortening response time is critical to reduce damages caused by attackers. Good job Adobe!