Apple Ships Vulnerable Adobe Flash with 'Snow Leopard,' Sophos Reports
Apple is silently downgrading users of Mac OS X 10.6, code-named Snow Leopard, to an old, vulnerable version of Adobe Flash Player. According to Sophos, users who upgrade to Snow Leopard are left with Adobe Flash Player Version 10.0.23.1, which is known to be susceptible to attacks.Apple is pushing out an older, vulnerable version of Adobe Flash Player with its "Snow Leopard" operating system upgrade, according to Sophos.Snow Leopard, aka Mac OS X 10.6, hit the streets Aug. 28 with much fanfare about promised performance improvements. Apple also generated some buzz by including a malware scanner in the mix to analyze downloads for two known Trojan families.
However, the updated operating system also includes a version of Adobe Flash Player that is vulnerable to several bugs. During the update process, Apple silently downgrades the latest version of Flash Player for Mac-Version 10.0.32.18-to Version 10.0.23.1, Sophos reported Sept. 2.