IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Should Adobe auto-update Flash and PDF Reader?

This year has seen Adobe plugin exploits hit the headlines. Is it time that the company automatically updates its software?

Adobe Flash symbol

Adobe needs to find a way to make sure that all of the users of its software are updated automatically, according to a leading security researcher.

Mikko Hypponen, chief security researcher for F-Secure, said that users were not typically found vulnerable through their operating systems, but rather through plugins and add-ons found inside internet browsers.

This means software such as Adobe PDF Reader and Flash, Java or Quicktime. While Windows is updated automatically, these are still left unpatched and therefore vulnerable to new exploits.

This is especially dangerous as Adobe Flash has a bigger market share than even Windows, and Mac and Linux users often had it on their systems. Of these users, 80 per cent ran old Flash.

It is also problematic that users aren't required to click on a Flash or PDF file, as you can get infected by simply browsing a website.

"That's the way that attackers gain way, and if you look at the market share of things like Adobe Flash or the PDF reader plugin, they are huge," said Hyponnen.

"Most of them are not up to date. Microsoft can do this, so Adobe should be able to do this as well."

Security exploits against QuickTime plugins were also an issue, which users often didn't install but found in their systems.

"It's because I have an iPod," Hyponnen said. "And because I have an iPod I have to install iTunes. When I install it will, without asking me, install QuickTime automatically."

QuickTime automatically installs a plugin inside a web browser, which means that if there is a flaw, it could be exploited.

"I'm not concerned with updating QuickTime. I've never even installed it," he added.

Adobe had not responded to request for comment at the time of publication.

Featured Resources

Accelerating AI modernisation with data infrastructure

Generate business value from your AI initiatives

Free Download

Recommendations for managing AI risks

Integrate your external AI tool findings into your broader security programs

Free Download

Modernise your legacy databases in the cloud

An introduction to cloud databases

Free Download

Powering through to innovation

IT agility drive digital transformation

Free Download

Recommended

Adobe forced to patch its own failed security update
bugs

Adobe forced to patch its own failed security update

18 Feb 2022
The pros and cons of flash storage
flash storage

The pros and cons of flash storage

31 Jan 2022
Adobe rolls out new PayPal payment options through Adobe Commerce
e commerce

Adobe rolls out new PayPal payment options through Adobe Commerce

16 Sep 2021
Signs it’s time to upgrade your CMS
Whitepaper

Signs it’s time to upgrade your CMS

23 Aug 2021

Most Popular

The UK's best cities for tech workers in 2022
Business strategy

The UK's best cities for tech workers in 2022

24 Jun 2022
LockBit 2.0 ransomware disguised as PDFs distributed in email attacks
Security

LockBit 2.0 ransomware disguised as PDFs distributed in email attacks

27 Jun 2022
Salaries for the least popular programming languages surge as much as 44%
Development

Salaries for the least popular programming languages surge as much as 44%

23 Jun 2022