Windows XP SP3 includes vulnerable Flash Player

Forum Moderators: open

Message Too Old, No Replies

Windows XP SP3 includes vulnerable Flash Player

bundles older version that's currently being exploited

Robert Charlton

7:37 am on Jun 3, 2008 (gmt 0)

According to a Computerworld Security article [computerworld.com]...

Windows XP SP3 includes vulnerable Flash Player
Microsoft's newest update bundles older version that's currently being exploited
June 2, 2008 (Computerworld) Microsoft Corp.'s Windows XP Service Pack 3 (SP3) ships with an out-of-date version of Adobe's Flash Player that's vulnerable to recently-spotted attacks, according to Microsoft's support documentation....

Wasn't sure whether to post this here or on the current Flash Player Exploit thread [webmasterworld.com]. Decided that SP3 users needed to be alerted to the problem.

Marcia

2:54 pm on Jun 30, 2008 (gmt 0)

I assume that it's better to buy the SP2 OEM full version then, rather than the SP3, newer one. Would that be right?

Both are available for sale, with today being the last day.

jimbeetle

3:10 pm on Jun 30, 2008 (gmt 0)

Heard a couple of not quite good things about SP3 here and there, including the media player problem, so decided to go with the OEM SP2. And from what I understand, XP will still be on retailers' shelves as supplies last. Still, best to grab it early.

Robert Charlton

5:58 pm on Jun 30, 2008 (gmt 0)

I assume that it's better to buy the SP2 OEM full version then, rather than the SP3, newer one. Would that be right?

Or, you could just update your Flash player after installing SP3.

With regard to SP2 OEM, doesn't MS make some distinctions about where it can be used? I don't know for sure... just asking. It's definitely a lot cheaper.

Marcia

6:57 pm on Jun 30, 2008 (gmt 0)

Actually, SP3 OEM is only about $20-$25 more, depending on where you shop. I bought one last night that's "used" but supposed to be never installed for $49 and sent it out of state to someone as a "gift." They're a committed Linux user, but need to have XP in their software library anyway, for double booting of if they get a new computer.

I'll be buying myself one today at regular price (around $85-90) when I get a processing glitch straightened out at a software merchant, but wasn't sure whether to get SP2 or SP3.

Robert Charlton

7:09 pm on Jun 30, 2008 (gmt 0)

I should have been clearer. The OEM version is less expensive than the packaged version, whether SP2 or SP3, but is intended to be installed by the dealer or manufacturer on gear they assemble.