Adobe kicked off the week with a security advisory warning users of its Flash Player about a zero-day bug that is reportedly “being exploited in the wild in targeted attacks via a Flash (.swf) file embedded in a Microsoft Excel (.xls) file delivered as an email attachment.” The vulnerability has also been confirmed to affect the auth.dll component that accompanies certain versions of Reader and Acrobat X, but the company has yet to come across any exploits targeting them.
Hit the jump to find out more about the vulnerability, including when exactly Adobe hopes to have it patched.
It's only fair that Google's browser, Chrome, use a Google-based service in this week's extension of the week. The name of the add-on is Send to Google Docs, but you don't need to be a rocket scientist to figure out the ins and outs of this little tweak.
I was originally scanning around for an interesting way to tweak the functionality of a PDF in the Chrome browser. In stumbling across Send to Google Docs, I was intrigued by the solution: Rather than simply sticking more save options onto the download bar, Send to Google Docs gave a far better deal.
It's kind of annoying to have to wade through a bunch of PDFs on one's hard drive. Depending on your reader of choice, clicking through PDF after PDF can eat up a lot of system resources... and a lot of time. Why not just stuff these files in the cloud and let Google's speedy rendering engine take care of the rest? Or, better yet, allow Google to convert these PDF files into a format that can be edited straight through Google Docs itself?
HP has begun offering a free Flash security tool called HP SWFScan, which helps developers identify vulnerabilities in their Flash apps. Though the ubiquity of Flash-based content should be enough motivation for developers to tighten the screws, a research conducted by HP revealed otherwise.
Developers concerned about indexing have thus far been hesitant to incorporate Flash into websites because of the challenge involved in making the content searchable. This despite the fact that more than 98 percent of internet-connected computers have Adobe's Flash Player installed. Search engines are able to index static text and lnks within Flash SWF files, but as Adobe points out, "rich internet applications and dynamic Web content have been generally difficult to fully expose to search engines because of their changing states," a problem which also exists in other RIA technologies.
To help get over that hurdle, Adobe announced a new initiative with Google and Yahoo to make Flash files more indexable-friendly by search engines. For its part, Google says it developed an algorithm that explores Flash files in the same way a surfer does, "by clicking buttons, entering input, and so on." Any text visible to a website visitor while interacting with a Flash file is also visible to Google's algorithm. And while Yahoo isn't quite as far along as Google, the collaboration with Adobe means it's now a matter of when, not if, SWF applications become more searchable.
Missing from this latest announcement is any mention of Microsoft and its MSN Search. It remains unclear whether Adobe purposely excluded the Redmond company, which owns Silverlight (a competitng format to Adobe's Flash), or if Microsoft chose not to participate. But regardless of Microsoft's level of involvement, expect to see more Flash content, whether you want it or not.