Update Adobe Flash Immediately, Says Microsoft

If you're still running an old version of Adobe's popular Flash player plug-in, you'd better update, says Microsoft. The software giant, which rarely tells customers to halt their use of another company's wares, has had it with the many bugs and security vulnerabilities in Flash Player 6.0, released several years ago.

In response to multiple bugs and a slew of security vulnerabilities, Microsoft has through its most recent Security Advisory (#979267) told users that they should either uninstall Flash Player 6.0 or immediately switch to a newer edition of the plugin.

Threats Include Remote Code Execution

It's rare that Microsoft would cite issues affecting the software of another company, but since Adobe's Flash Player originally shipped with Windows XP, apparently the Redmond-based firm feels it owes something to its legion of XP hangers-on.

"The Adobe Flash Player 6 was provided with Windows XP and contains multiple vulnerabilities that could allow remote code execution if a user views a specially crafted Web page," Microsoft announced in its Security Advisory yesterday. "Adobe has addressed these vulnerabilities in newer versions of Adobe Flash Player. Microsoft recommends that users of Windows XP with Adobe Flash Player 6 installed update to the most current version of Flash Player available from Adobe."

Waiting for the Inevitable to Occur

The warning has nothing to do with any imminent or reported threat to users of both XP and old versions of Flash, since Microsoft added that it is "not aware of attacks that try to use the reported vulnerabilities... at this time." However, it would seem the company believes such a threat will arise, and that at this point it's just a matter of waiting for the inevitable to occur.

Support for Flash 6.0 Ended in 2006

Adobe discontinued its support of Flash Player 6.0 back in 2006, but the latest version of the plugin, version 10.0.42.34, is available from the company's site right now.

Given Flash's incredible popularity amongst home and business users alike, Microsoft is being particularly pushy with this one, adding the warning to its Patch Tuesday release.