Running the RTM (or release-to-manufacturing) version of Windows 8? You just might be, given that Microsoft made it publicly available last month. Perhaps you should hold off on your trailblazing for a little while, though.
As ZDNet's Ed Bott reports, the version of Adobe Flash built into Internet Explorer 10 suffers from a serious security vulnerability. The vulnerability "could cause a crash and potentially allow an attacker to take control of the affected system," according to Adobe.
That wouldn't be a problem with past versions of IE, because you could just grab the latest Flash plug-in and be on your way. However, Flash is built right into IE10. Only Microsoft can deliver updates, and it doesn't seem to be doing that right now. Here's what the company told Bott:
Security is of course important to us, and we are working directly with Adobe to ensure that Windows 8 customers stay secure. We will update Flash in Windows 8 via Windows Update as needed. The current version of Flash in the Windows 8 RTM build does not have the latest fix, but we will have a security update coming through Windows Update in the GA timeframe.
"GA" means "general availability," which is shorthand for Windows 8's October 26 release date. In other words, don't expect IE10's Flash hole to be plugged until then.
Now, Bott rightfully points out that the version of Windows 8 RTM available from Microsoft's MSDN Evaluation Center is for testing purposes only. You're not supposed to install it on production hardware, and the license key has an expiration date, anyway. That said, it seems a little strange that Microsoft is leaving testers and developers vulnerable to a serious security issue—one Adobe has already patched, to boot.
|AMD reveals suitably massive Ryzen Threadripper packaging||54|
|GeForce 384.94 drivers are ready to break the law||0|
|Rumor: Specs of six-core Coffee Lake CPUs leak||24|
|Alphacool Eisblock HDX-2 and HDX-3 help M.2 SSDs beat the heat||12|
|Corsair Lighting Pro Expansion Kit lets builders turn up the lights||11|
|Gigabyte SA-SBCAP3350 puts formidable power on a single board||14|
|Adata D16750 power bank is tougher than the average juice pack||16|
|Deals of the week: fast memory, an AM4 motherboard, and more||18|
|Corsair RMx White Series PSUs take a walk on the snowy side||24|
|Waiting for FaceRipper http://images.anandtech.com/doci/11636/dbwthwoxkaeehmw-1.jpg.324b24f4c47236d1eaf463abf6ad95a3.jpg||+11|