JD on EP

Just wondering if this vulnerability is present in FP 8.5+

Sorry for the omission, that's a good point... the beta 8.5 Player already has these changes built into it... it was the various back versions, environments and languages which were all released today. The new Player already uses this new locking mechanism.

One of the Mac fansites raises a different issue. Adobe hasn't actually released any Flash Player on the new Intel-based Macintosh hardware yet. This causes difficulties for those who immediately migrated to new hardware, then tried the update, blasting out their Apple preview builds in the process.

Minor correction: Flash Player 8.5 does *not* (yet) do version checking/locking. This is because it is still pre-release software. It is the same reason the installers for 8.5 are currently unsigned. From a security perspective, we haven't "blessed" this pre-release software so it doesn't make sense to treat it like final, release software.

We will apply the version checking on install, and signing for the release version.

best,
Emmy Huang
Product Manager, Flash Player

According to Flash Player Support Center, the update includes Test Movie player.
http://www.macromedia.com/support/flashplayer/downloads.html

However, after Flash 8 is updated, player version in [Test Movie] still seems to be 8,0,22,0, which is shown by [List variables], getVersion(), or System.capabilities.version. Is the Test Movie Player really included? I updated Flash 8 for Mac OS X.4.5 and Winsows XP (SP1).

Fumio, is that "Does the update change the authoring environment engine too?"

If so, then I haven't had the bandwidth to test that myself yet, but I've seen an internal conversation along similar lines... don't know its resolution yet, but I have queries out.

Oh, I see, this "authoring updated" is a spawn of a few different FlashCoders discussions under different names... I had read some of those yesterday but they couldn't get to an answerable situation quickly and I passed to other issues... let's hit it up over there, in one of the different thread names on FlashCoders, soon as I can get out of this meeting I'm in to try to get source info from others.....

Fumio, sorry for the delay... for "Does the security updater change the player inside the authoring environment?" then I received a verbal "no" from one of the team members today, but I cannot yet find a citation on the Adobe website... let me keep pursuing this so I can get some authoritative info, sorry to keep you waiting in the meantime.... :(

jd

Thank you for your prompt reply, jd. I am staying tuned.