Cross-scripting flaws patched in Adobe app software

published 18 August 2009

Adobe has released another update to secure vulnerabilities in its software, as its season of security woe continues.

Critical vulnerabilities were found its application development software ColdFusion and its J2EE application server JRun 4.0.

According to its latest security bulletin, the cross-scripting vulnerabilities could have led to the compromise of user accounts on the affected system.

In a blog post, Adobe claimed that it was not aware of any exploits in the wild for the flaws found in the release.

This is just the latest in a series of security warnings and patches over Adobe products in the past few months, which has forced the company to implement a patching scheme for some of its products.

At the beginning of the month Adobe had to release an out-of-cycle patch for Flash Player, AIR, Reader and Acrobat software.