Adobe rolls out critical security updates

Adobe has released patches to address multiple security vulnerabilities in its ColdFusion web development and JRun Java administration tools.

The updates fix flaws in both applications that could allow an attacker to take control of a targeted system and remotely execute code.

The ColdFusion update addresses five vulnerabilities in versions 7.0.2, 8.0 and 8.0.1 of the web application development platform. The flaws could allow escalation of privileges, information disclosure or remote code execution.

The JRun patch covers two vulnerabilities, one that could allow an attacker to remotely execute code via a cross-site scripting attack, and one that could allow for information disclosure.

Adobe said that the issues are considered critical, and advised users and administrators to install the updates immediately.

The updates from Adobe come one week after Microsoft released its monthly security update, which included fixes for Windows and Office, including five critical vulnerabilities.