Is it Time to Uninstall Flash? (If you haven't already)

SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Is it Time to Uninstall Flash? (If you haven't already)
If you haven't uninstalled Flash yet, maybe today should be that day. The update posted yesterday has a remote code exec proof-of-concept already here: https://github.com/smgorelik/Windows-RCE-exploits/blob/master/Documents/Office%2BFlash/CVE-2018-15982_%23PoC%23.zip And Gigamon has posted that it's being seen in the wild already: https://atr-blog.gigamon.com/2018/12/05/adobe-flash-zero-day-exploited-in-the-wild/ =============== Rob VandenBrink Compugen	Rob VandenBrink 566 Posts ISC Handler Dec 6th 2018
Thread locked Subscribe	Dec 6th 2018 2 years ago
Are there Registry Hacks to kill off Flash in Windows 10?	PaulOutBox 7 Posts
Quote	Dec 6th 2018 2 years ago
Yes, Flash doesn't show up correctly in the "wmic product" list, so the standard powershell uninstall methods can be a problem. Most application managers do handle Flash correctly, but if you don't have a software inventory / mgt app, Adobe has a "this uninstalls all versions" executable here: download.macromedia.com/get/flashplayer/current/support/… Once it's downloaded, run (with admin rights) "uninstall_flash_player -uninstall" (this bypasses the "OK" user prompt) It's not 100%, but I've had good luck with it so far (including on Windows 10).	Rob VandenBrink 566 Posts ISC Handler
Quote	Dec 6th 2018 2 years ago