Microsoft announced that it will update Adobe Flash Player to ensure security for Windows 8. In this new Windows program, Adobe Flash is embedded in Internet Explorer 10.
Microsoft wants to fix everything before the system hits stores. Until then, Microsoft is working with Adobe Systems to avoid vulnerabilities. The company announced that they will wait until Windows 8 will be generally available before including the latest updates issued by Adobe.
Additionally, Microsoft is working with Adobe to release an update for Flash in IE 10 that will be available soon. A spokesperson for Microsoft said: “Ultimately, our goal is to make sure the Flash Player in Windows 8 is always secure and up-to-date, and to align our release schedule as closely to Adobe’s as possible.”
Wolfgang Kandek, CTO at Qualys said that integrating Flash into IE will improve end-user security and that other applications will be patched through the Microsoft updater. He added: “When we look at statistics from our BrowserCheck application we constantly see that 3rd party applications (i.e. Flash, Java, Reader) are slower in updating than Windows native application (i.e. Windows Media Player). We attribute that to the lack of automatic update mechanisms in some older applications, plus usability and integration issues with the multiple update mechanisms that a typical PC user has to deal with.”
Nonetheless, Lamar Bailer, director of security research and development at nCircle has a different opinion: “Since Microsoft decided to follow the Google Chrome model of embedding Flash within browser, they’re tied to Adobe now for better or worse. Flash has been plagued with security issues for a long time, and embedding Flash means that IE10 end users will have to wait for Microsoft to patch Flash issues.”
He also asked rhetorically if Adobe will provide security information to Microsoft soon enough to get Flash patches to Windows 8 users when they hit the rest of the market. Or will Adobe delay the necessary patches? For now, how things will evolve, no one can tell for sure.