Basierend auf der über 25-jährigen Erfahrung Adobes im Umgang mit Text bietet die neue, sehr flexible Text-Engine des Adobe Flash Player 32 Web-Designern und Entwicklern zusätzliche Text-Layout-Optionen und eine verbesserte kreative Kontrolle.
Jeder der regelmäßig im Internet unterwegs ist, sollte sich das Adobe Flash Player Plugin für seinen Browser installieren, da einem ansonsten interessante Inhalte und Spiele entgehen könnten. Auch viele Videoplayer nutzen Flash um die Inhalte an den User zu übertragen.
Man sollte aber immer darauf achten, dass man die aktuelleste Version des Adobe Flash Players gratis einsetzt und regelmäßig Updates installieren, da über die Flash Schnittstelle des Players des öfteren Schadsoftware verbreitet wird. Bekannte Sicherheitslücken werden aber meist kurzfristig geschlossen. Trotz dieser immer wieder auftretenden Sicherheitslücken, ist der Flash Player von Adobe immer noch die beliebteste Browsererweiterung am Internet.
Der Adobe Flash Player Download hilft Ihrem Browser bei der Darstellung von Flash-Inhalten im Web: Dabei kann es sich um Videos, Spiele, Animationen, oder sonstige interaktive Anwendungen handeln, die auf Flash basieren. Dieser Flash Player ist für diese Inhalte dabei obligatorisch. Durch den HTML 5 Standard ist es allderdings heut möglich, diese Inhalte auch Alternativ zur Verfügung zu stellen, aber noch hat HTML 5 die Flash Inhalte nicht komplett abgelöst.
Fazit: Der Adobe Flash Player kostenlos unterstützt die Formate flv und SWF und darf eigentlich auf keinem System fehlen.
Adobe Flash Player (known in Internet Explorer, Firefox, and Google Chrome as Shockwave Flash)[10] is computer software for viewing multimedia contents, executing rich Internet applications, and streaming audio and video content created on the Adobe Flash platform. It can run from a web browser as a browser plug-in or independently on supported devices. Originally created by FutureWave under the name FutureSplash Player, it was renamed to Macromedia Flash Player after Macromedia acquired FutureWave in 1996. It was then developed and distributed by Adobe Systems as Flash Player after Adobe acquired Macromedia in 2005. It is currently developed and distributed by Zhongcheng for users in China, and by Harman International for enterprise users outside of China, in collaboration with Adobe.
Flash Player runs SWF files that can be created by Adobe Flash Professional, Adobe Flash Builder or by third-party tools such as FlashDevelop. Flash Player supports vector graphics, 3D graphics, embedded audio, video and raster graphics, and a scripting language called ActionScript, which is based on ECMAScript (similar to JavaScript) and supports object-oriented code. Internet Explorer 11 and Microsoft Edge Legacy, in Windows 8 and later, along with Google Chrome on all versions of Windows, came bundled with a sandboxed Adobe Flash plug-in.[11][12][13][14][15]
Flash Player once had a large user base, and was a common format for web games, animations, and graphical user interface (GUI) elements embedded in web pages. Adobe stated in 2013 that more than 400 million out of over 1 billion connected desktops updated to new versions of Flash Player within six weeks of release.[16] However, Flash Player became increasingly criticized for its performance, consumption of battery on mobile devices, the number of security vulnerabilities that had been discovered in the software, and its closed platform nature. Apple co-founder Steve Jobs was highly critical of Flash Player, having published an open letter detailing Apple's reasoning for not supporting Flash on its iOS device family. Its usage also waned because of modern web standards that allow some of Flash's use cases to be fulfilled without third-party plugins.[17][18][19] This led to the eventual deprecation of the platform by Adobe. Flash Player was officially discontinued on 31 December 2020, and its download page was removed two days later. Since 12 January 2021, Flash Player (original global variants) versions newer than 32.0.0.371, released in May 2020, refuse to play Flash content and instead display a static warning message.[20] The software remains supported in mainland China and in some enterprise variants.[21]
Features[edit]
Adobe Flash Player is a runtime that executes and displays content from a provided SWF file, although it has no in-built features to modify the SWF file at runtime. It can execute software written in the ActionScript programming language which enables the runtime manipulation of text, data, vector graphics, raster graphics, sound, and video. The player can also access certain connected hardware devices, including the web cameras and microphones, after permission for the same has been granted by the user.
Flash Player was used internally by the Adobe Integrated Runtime (AIR), to provide a cross-platform runtime environment for desktop applications and mobile applications. AIR supports installable applications on Windows, Linux, macOS, and some mobile operating systems such as iOS and Android. Flash applications must specifically be built for the AIR runtime to use additional features provided, such as file system integration, native client extensions, native window/screen integration, taskbar/dock integration, and hardware integration with connected Accelerometer and GPS devices.[22]
Data formats[edit]
Flash Player included native support for many data formats, some of which can only be accessed through the ActionScript scripting interface.
- XML: Flash Player has included native support for XML parsing and generation since version 8. XML data is held in memory as an XML Document Object Model, and can be manipulated using ActionScript. ActionScript 3 also supports ECMAScript for XML (E4X), which allows XML data to be manipulated more easily.
- JSON: Flash Player 11 includes native support for importing and exporting data in the JavaScript Object Notation (JSON) format, which allows interoperability with web services and JavaScript programs.
- AMF: Flash Player allows application data to be stored on users computers, in the form of Local Shared Objects, the Flash equivalent to browser cookies.[23] Flash Player can also natively read and write files in the Action Message Format, the default data format for Local Shared Objects. Since the AMF format specification is published, data can be transferred to and from Flash applications using AMF datasets instead of JSON or XML, reducing the need for parsing and validating such data.
- SWF: The specification for the SWF file format was published by Adobe, enabling the development of the SWX Format project, which used the SWF file format and AMF as a means for Flash applications to exchange data with server side applications.[24][25] The SWX system stores data as standard SWF bytecode which is automatically interpreted by Flash Player.[26] Another open-source project, SWXml allows Flash applications to load XML files as native ActionScript objects without any client-side XML parsing, by converting XML files to SWF/AMF on the server.[27][28]
Flash Player is primarily a graphics and multimedia platform, and has supported raster graphics and vector graphics since its earliest version. It supports the following different multimedia formats which it can natively decode and play back.
- MP3: Support for decoding and playback of streaming MPEG-2 Audio Layer III (MP3) audio was introduced in Flash Player 4. MP3 files can be accessed and played back from a server via HTTP, or embedded inside an SWF file, which is also a streaming format.
- FLV: Support for decoding and playing back video and audio inside Flash Video (FLV and F4V) files, a format developed by Adobe Systems and Macromedia. Flash Video is only a container format and supports multiple different video codecs, such as Sorenson Spark, VP6, and more recently H.264.[29] Flash Player uses hardware acceleration to display video where present, using technologies such as DirectX Video Acceleration and OpenGL to do so. Flash Video is used by YouTube,[30] Hulu,[31] Yahoo! Video, BBC Online,[32] and other news providers. FLV files can be played back from a server using HTTP progressive download, and can also be embedded inside an SWF file. Flash Video can also be streamed via RTMP using the Adobe Flash Media Server or other such server-side software.
- PNG: Support for decoding and rendering Portable Network Graphics (PNG) images, in both its 24-bit (opaque) and 32-bit (semi-transparent) variants. Flash Player 11 can also encode a PNG bitmap via ActionScript.
- JPEG: Support for decoding and rendering compressed JPEG images. Flash Player 10 added support for the JPEG-XR advanced image compression standard developed by Microsoft Corporation, which results in better compression and quality than JPEG. JPEG-XR enables lossy and lossless compression with or without alpha channel transparency. Flash Player 11 can also encode a JPEG or JPEG-XR bitmap via ActionScript.
- GIF: Support for decoding and rendering compressed Graphics Interchange Format (GIF) images, in its single-frame variants only. Loading a multi-frame GIF will display only the first image frame.
Streaming protocols[edit]
Performance[edit]
Hardware acceleration[edit]
Until version 10 of the Flash player, there was no support for GPU acceleration. Version 10 added a limited form of support for shaders on materials in the form of the Pixel Bender API, but still did not have GPU-accelerated 3D vertex processing.[41] A significant change came in version 11, which added a new low-level API called Stage3D (initially codenamed Molehill), which provides full GPU acceleration, similar to WebGL.[42][43] (The partial support for GPU acceleration in Pixel Bender was completely removed in Flash 11.8, resulting in the disruption of some projects like MIT's Scratch, which lacked the manpower to recode their applications quickly enough.[44][45])
Current versions of Flash Player are optimized to use hardware acceleration for video playback and 3D graphics rendering on many devices, including desktop computers. Performance is similar to HTML5 video playback.[46][47] Also, Flash Player has been used on multiple mobile devices as a primary user interface renderer.[48]
Compilation[edit]
Although code written in ActionScript 3 executes up to 10 times faster than the prior ActionScript 2,[49] the Adobe ActionScript 3 compiler is a non-optimizing compiler, and produces inefficient bytecode in the resulting SWF, when compared to toolkits such as CrossBridge.[50][51][52][53][54]
CrossBridge, a toolkit that targets C++ code to run within the Flash Player, uses the LLVM compiler to produce bytecode that runs up to 10 times faster than code the ActionScript 3 compiler produces, only because the LLVM compiler uses more aggressive optimization.[52][53][54]
Adobe has released ActionScript Compiler 2 (ASC2) in Flex 4.7 and onwards, which improves compilation times and optimizes the generated bytecode and supports method inlining, improving its performance at runtime.[55]
As of 2012, the Haxe multiplatform language can build programs for Flash Player that perform faster than the same application built with the Adobe Flex SDK compiler.[56][unreliable source?]
Development methods[edit]
Flash Player applications and games can be built in two significantly different methods:
- "Flex" applications: The Adobe Flex Framework is an integrated collection of stylable Graphical User Interface, data manipulation and networking components, and applications built upon it are termed "Flex" applications. Startup time is reduced since the Flex framework must be downloaded before the application begins, and weighs in at approximately 500KB. Editors include Adobe Flash Builder and FlashDevelop.
- "Pure ActionScript" applications: Applications built without the Flex framework allow greater flexibility and performance.[57][58][59] Video games built for Flash Player are typically pure-Actionscript projects. Various open-source component frameworks are available for pure ActionScript projects, such as MadComponents, that provide UI Components at significantly smaller SWF file sizes.[60][61]
In both methods, developers can access the full Flash Player set of functions, including text, vector graphics, bitmap graphics, video, audio, camera, microphone, and others. AIR also includes added features such as file system integration, native extensions, native desktop integration, and hardware integration with connected devices.
Adobe provides five ways of developing applications for Flash Player:
Third-party development environments are also available:
- FlashDevelop: an open-source Flash ActionScript IDE, which includes a debugger for AIR applications
- Powerflasher FDT: a commercial ActionScript IDE
- CodeDrive: an extension to Microsoft Visual Studio 2010 for ActionScript 3 development and debugging
- MTASC: a compiler
- Haxe: a multi-platform language[63]
Game development[edit]
Adobe Gaming SDK 1.0 logo
Adobe offers the free Adobe Gaming SDK, consisting (as of August 2014) of several open-source AS3 libraries built on the Flash Player Stage3D APIs for GPU-accelerated graphics:[64]
- Away3D: GPU-accelerated 3D graphics and animation engine
- Starling: GPU-accelerated 2D graphics that mimics the Flash display list API
- Feathers: GPU-accelerated skinnable GUI library built on top of Starling
- Dragon Bones: GPU-accelerated 2D skeletal animation library
A few commercial game engines target Flash Player (Stage3D) as run-time environment, such as Unity 3D[65] and Unreal Engine 3.[65][66] Before the introduction of Stage3D, a number of older 2D engines or isometric engines like Flixel saw their heyday.[67]
Adobe also developed the CrossBridge toolkit which cross-compiles C/C++ code to run within the Flash Player, using LLVM and GCC as compiler backends, and high-performance memory-access opcodes in the Flash Player (termed "Domain Memory") to work with in-memory data quickly.[68] CrossBridge is targeted toward the game development industry, and includes tools for building, testing, and debugging C/C++ projects in Flash Player.
Notable online video games developed in Flash include Angry Birds, FarmVille, and AdventureQuest (started in 2002, and still active as of 2020).[69]
Availability[edit]
Desktop platforms[edit]
Adobe Flash Player is available in two major flavors:
- The plugin version for use in various web browsers
- The "projector" version is a standalone player that can open SWF files directly.[70][71]
On February 22, 2012, Adobe announced that it would no longer release new versions of NPAPI Flash plugins for Linux, although Flash Player 11.2 would continue to receive security updates.[72][73][74] In August 2016 Adobe announced that, beginning with version 24, it will resume offering of Flash Player for Linux for other browsers.[75]
The Extended Support Release (ESR) of Flash Player on macOS and Windows was a version of Flash Player kept up to date with security updates, but none of the new features or bug fixes available in later versions. In August 2016, Adobe discontinued the ESR branch and instead focused solely on the standard release.[76]
Version 10 can be run under Windows 98/Me using KernelEx. HP offered Version 6 of the player for HP-UX,[89] while Innotek GmbH offered versions 4 and 5 for OS/2.[90] Other versions of the player have been available at some point for BeOS.[citation needed]
Mobile platforms[edit]
In 2011, Flash Player had emerged as the de facto standard for online video publishing on the desktop, with adaptive bitrate video streaming, DRM, and fullscreen support.[30][31] On mobile devices, however, after Apple refused to allow the Flash Player within the inbuilt iOS web browser, Adobe changed strategy, enabling Flash content to be delivered as native mobile applications using the Adobe Integrated Runtime.
Up until 2012, Flash Player 11 was available for the Android (ARM Cortex-A8 and above),[91] although in June 2012, Google announced that Android 4.1 (codenamed Jelly Bean) would not support Flash by default. In August 2012, Adobe stopped updating Flash for Android.[92]
Flash Player was supported on a select range of mobile and tablet devices, from Acer, BlackBerry 10, Dell, HTC, Lenovo, Logitech, LG, Motorola, Samsung, Sharp, SoftBank, Sony (and Sony Ericsson), and Toshiba.[93][94][95] As of 2012, Adobe has stopped browser-based Flash Player development for mobile browsers in favor of HTML5,[96][97] however, Adobe continues to support Flash content on mobile devices with the Adobe Integrated Runtime, which allows developers to publish content that runs as native applications on certain supported mobile phone platforms.
Adobe said it will optimize Flash for use on ARM architecture (ARMv7 and ARMv6 architectures used in the Cortex-A series of processors and in the ARM11 family) and release it in the second half of 2009. The company also stated it wants to enable Flash on NVIDIA Tegra, Texas Instruments OMAP 3, and Samsung ARMs.[98][99] Beginning 2009, it was announced that Adobe would be bringing Flash to TV sets via Intel Media Processor CE 3100 before mid-2009.[100] ARM Holdings later said it welcomes the move of Flash, because "it will transform mobile applications and it removes the claim that the desktop controls the Internet."[101] However, as of May 2009, the expected ARM/Linux netbook devices had poor support for Web video and fragmented software base.[102]
Among other devices, LeapFrog Enterprises provides Flash Player with their Leapster Multimedia Learning System and extended the Flash Player with touch-screen support.[103] Version 9 was the most recent version available for the Linux/ARM-based Nokia 770/N800/N810 Internet tablets running Maemo OS2008.[89] Other versions of the player have been available at some point for Symbian OS and Palm OS.[104] The Kodak Easyshare One includes Flash Player.[105]
The following table documents historical support for Flash Player on mobile operating systems:
Other hardware[edit]
Some CPU emulators have been created for Flash Player, including Chip8,[113] Commodore 64,[114] ZX Spectrum,[115] and the Nintendo Entertainment System.[116] They enable video games created for such platforms to run within Flash Player.
End of life[edit]
Adobe announced on July 25, 2017, that it would end support for the normal/global variant of Flash Player on January 1, 2021, and encouraged developers to use HTML5 standards in place of Flash.[117][118] The announcement was coordinated with Apple,[119] Facebook,[120] Google,[121] Microsoft,[122] and Mozilla.[123] Adobe announced that all major web browsers planned to officially remove the Adobe Flash Player component on December 31, 2020, and Microsoft removed it from the Windows OS in January 2021 via Windows Update. In a move to further reduce the number of Flash Player installations, Adobe added a "time bomb" to Flash to disable existing installations after January 12, 2021.[124] In mid-2020, Flash Player started prompting users to uninstall itself.[125] Adobe removed all existing download links for Flash installers.[126] After January 26, 2021, all major web browsers including Apple Safari, Google Chrome, Microsoft Edge, and Mozilla Firefox have already permanently removed Flash support.[127] However, Flash content continues to be accessible on the web through emulators such as Ruffle, with varying degrees of compatibility and performance, although this is not endorsed by Adobe.
Web browsers[edit]
Google Chrome[edit]Starting from Chrome 76, Flash is disabled by default without any prompts to activate Flash content.[128] Users who wanted to play Flash content had to manually set a browser to prompt for Flash content, and then during each browser session enable Flash plugin for every site individually. Microsoft Edge, which is based on Chromium, followed the same plan as Google Chrome.[129]
Google Chrome blocked the Flash plugin as "out of date" in January 2021, and fully removed it from the browser with Chrome version 88, released on January 20, 2021.[130][131]
Mozilla Firefox[edit]Starting with Firefox 85,[128] Flash is disabled by default without any prompts to activate Flash content. To play Flash content, users had to manually set a browser to prompt for Flash content, and then during each browser session enable Flash plugin for every site individually. Firefox 85, released on January 26, 2021, completely removed support for the Flash plugin.[127] Firefox ESR dropped support on November 2, 2021 (Firefox 78 ESR was the last version with support).[132]
Microsoft Windows[edit]On October 27, 2020, Microsoft released an update (named KB4577586) for Windows 10 and 8.1 which removes the embedded Adobe Flash Player component from IE11 and Edge Legacy. In July 2021, this update was automatically installed as a security patch.[133][134] However, an ActiveX Flash Player plugin may still be used with IE after this update is applied.[135][136]
Apple Safari[edit]Apple dropped Flash Player support from Safari 14 alongside the release of macOS Big Sur.[137][138]
Fallout[edit]
Despite the years of notice, several websites still were using Flash following December 31, 2020, including the U.S. Securities and Exchange Commission. Many of these were resolved in the weeks after the deadline. However, many educational institutions still relied on Flash for educational material and did not have a path forward for replacement.[139]
Post-EOL support[edit]
Mainland China[edit]The China-specific variant of Flash will be supported beyond 2020, by a company known as Zhongcheng.[140][141] The Projector (standalone) versions of this variant also work outside of China and do not include the "Flash Helper Service"; however, some tracking code still seems to be present. They are available on a somewhat hidden "Debug" page.[142] In addition, as the global variant of the plugin was discontinued, some users have figured how to modify and repack the China-specific variant to bring it more in line with the global variant. This includes removing the "Flash Helper Service" and removing the China only installation restriction, along with all other geo-restrictions and tracking code. A "time bomb", similar to the one found in later versions of the global variant, is also present in the unmodified China variant; this is also removed in most repacks. In theory, these repacks should provide users outside of China with the latest security updates to Flash Player, without having to deal with invasive advertisements or worry about privacy risks.[143] One such project, "Clean Flash Installer", was served a DMCA takedown from Adobe in October 2021.[144]
Enterprise[edit]Adobe has partnered with Harman to support enterprise Flash Player users until at least 2023.[145][146] The Harman Flash player variant is labeled as version 50.x, to avoid confusion with other variants.[78]
Web browsers[edit]Internet Explorer 11, along with IE mode in Edge,[78] will continue with ActiveX support, and by extension Flash Player support.[136] Firefox forks that plan to continue NPAPI support, and by extension Flash Player support, include Waterfox, Basilisk, Pale Moon, and K-Meleon. Various Chromium-based Chinese browsers will also continue to support Flash Player in PPAPI and/or NPAPI form, including, but not limited to, 360 Secure Browser.[135]
Shortly after Flash EOL, South African Revenue Service (SARS) released a custom version of Chromium browser with the Adobe Flash Player "time bomb" removed. This browser can access only a small set of SARS online pages containing Flash-based forms required for filing financial reports.[147]
Adobe Flash Player Projector[edit]Although no longer available directly from Adobe, all versions of Adobe Flash Player Projector (also known as Adobe Flash Player Standalone) lack the "time bomb" present in the newer plug-in variants, and thus continue to be able to play all supported Flash file formats, including SWF files, without modification.[148][71][142]
The Internet Archive hosts some Flash content and makes it playable in modern browsers via emulators, Ruffle and Emularity.[149] Other emulators, such as CheerpX, also exist as options for Flash Player emulation on other websites.[150] BlueMaxima's Flashpoint project claims to have collected more than 38,000 Adobe Flash Player games and animations and made them available for download.[151]
Open source[edit]
Adobe has released some components of Adobe Flash products as open source software via Open Screen Project or donated them to open source organizations. As of 2021, most of these technologies are considered obsolete. This includes: ActionScript Virtual Machine 2 (AVM2) which implements ActionScript 3 (donated as open-source to Mozilla Foundation), Adobe Flex Framework (donated as open-source to the Apache Software Foundation and rebranded as Apache Flex,[62] superseded by Apache Royale), CrossBridge C++ cross-compilation toolset (released on GitHub).[152][153]
Criticism[edit]
Accessibility and usability[edit]
In some browsers, prior Flash versions have had to be uninstalled before an updated version could be installed.[154][155] However, as of version 11.2 for Windows, there are now automatic updater options.[156] Linux is partially supported, as Adobe is cooperating with Google to implement it via Chrome web browser on all Linux platforms.[157]
Mixing Flash applications with HTML leads to inconsistent input handling leading to poor user experience with the site (keyboard and mouse not working as they would in an HTML-only document).[citation needed]
Privacy[edit]
Flash Player supports persistent local storage of data (also referred to as Local Shared Objects), which can be used similarly to HTTP cookies or Web Storage in web applications. Local storage in Flash Player allows websites to store non-executable data on a user's computer, such as authentication information, game high scores or web browser games, server-based session identifiers, site preferences, saved work, or temporary files. Flash Player will only allow content originating from exactly the same website domain to access data saved in local storage.[158]
Because local storage can be used to save information on a computer that is later retrieved by the same site, a site can use it to gather user statistics, similar to how HTTP cookies and Web Storage can be used. With such technologies, the possibility of building a profile based on user statistics is considered by some a potential privacy concern. Users can disable or restrict use of local storage in Flash Player through a "Settings Manager" page.[159][160] These settings can be accessed from the Adobe website or by right-clicking on Flash-based content and selecting "Global Settings".
Local storage can be disabled entirely or on a site-by-site basis. Disabling local storage will block any content from saving local user information using Flash Player, but this may disable or reduce the functionality of some websites, such as saved preferences or high scores and saved progress in games.
Flash Player 10.1 and upward honor the privacy mode settings in the latest versions of the Chrome, Firefox, Internet Explorer, and Safari web browsers, such that no local storage data is saved when the browser's privacy mode is in use.[161]
Security[edit]
Adobe security bulletins and advisories announce security updates, but Adobe Flash Player release notes do not disclose the security issues addressed when a release closes security holes, making it difficult to evaluate the urgency of a particular update. A version test page allows the user to check if the latest version is installed, and uninstallers may be used to ensure that old-version plugins have been uninstalled from all installed browsers.
In February 2010, Adobe officially apologized[162] for not fixing a known vulnerability for over a year. In June 2010 Adobe announced a "critical vulnerability" in recent versions, saying there are reports that this vulnerability is being actively exploited in the wild against both Adobe Flash Player, and Adobe Reader and Acrobat.[163][164] Later, in October 2010, Adobe announced[165] another critical vulnerability, this time also affecting Android-based mobile devices. Android users have been recommended to disable Flash or make it only on demand.[166] Subsequent security vulnerabilities also exposed Android users, such as the two critical vulnerabilities published in February 2013[167] or the four critical vulnerabilities published in March 2013,[168] all of which could lead to arbitrary code execution.
Symantec's Internet Security Threat Report[169] states that a remote code execution in Adobe Reader and Flash Player[170] was the second most attacked vulnerability in 2009. The same report also recommended using browser extensions to disable Flash Player usage on untrusted websites. McAfee predicted that Adobe software, especially Reader and Flash, would be primary target for attacks in 2010.[171] Adobe applications had become, at least at some point, the most popular client-software targets for attackers during the last quarter of 2009.[172] The Kaspersky Security Network published statistics for the third quarter of 2012 showing that 47.5% of its users were affected by one or more critical vulnerabilities.[173] The report also highlighted that "Flash Player vulnerabilities enable cybercriminals to bypass security systems integrated into the application."[173]
Steve Jobs criticized the security of Flash Player, noting that "Symantec recently highlighted Flash for having one of the worst security records in 2009".[174] Adobe responded by pointing out that "the Symantec Global Internet Threat Report for 2009, found that Flash Player had the second lowest number of vulnerabilities of all Internet technologies listed (which included both web plug-ins and browsers)."[175][176]
On April 7, 2016, Adobe released a Flash Player patch for a zero-day memory corruption vulnerability CVE-2016-1019 that could be used to deliver malware via the Magnitude exploit kit. The vulnerability could be exploited for remote code execution.[177][178]
Vendor lock-in[edit]
Flash Player 11.2 does not play certain kinds of content unless it has been digitally signed by Adobe, following a license obtained by the publisher directly from Adobe.[179]
This move by Adobe, together with the abandonment of Flex to Apache was criticized as a way to lock out independent tool developers, in favor of Adobe's commercial tools.[180][181][182]
This has been resolved as of January 2013, after Adobe no longer requires a license or royalty from the developer. All premium features are now classified as general availability, and can be freely used by Flash applications.[183]
Apple controversy[edit]
In April 2010, Steve Jobs, at the time CEO of Apple Inc. published an open letter explaining why Apple would not support Flash on the iPhone, iPod Touch, and iPad.[174] In the letter he blamed problems with the "openness", stability, security, performance, and touchscreen integration of the Flash Player as reasons for refusing to support it. He also claimed that when one of Apple's Macintosh computers crashes, "more often than not" the cause can be attributed to Flash, and described Flash as "buggy".[184] Adobe's CEO Shantanu Narayen responded by saying, "If Flash [is] the number one reason that Macs crash, which I'm not aware of, it has as much to do with the Apple operating system."[185]
Steve Jobs also claimed that a large percentage of the video on the Internet is supported on iOS, since many popular video sharing websites such as YouTube have published video content in an HTML5 compatible format, enabling videos to playback in mobile web browsers even without Flash Player.[186]
Mainland China-specific variant[edit]
Starting with version 30, Adobe stopped distributing Flash Player directly to users from mainland China. Instead, they selected 2144.cn as a partner and released a special variant of Flash Player on a specific website,[187] which contains a non-closable process, known as the "Flash Helper Service", that collects private information and pops up advertisement window contents,[188] by receiving and running encrypted programs from a remote server.[189] The partnership started in about 2017, but in version 30, Adobe disabled the usage of vanilla (global) variant of Flash Player in mainland China,[190] forcing users to use that specific variant, which may pose a risk to its users due to Internet censorship by Chinese Communist Party (CCP).[191] This only affected Chinese Chromium based browser users, Firefox users, and Internet Explorer users using Windows 7 and below, as Microsoft still directly distributed Flash Player for Internet Explorer and Microsoft Edge through Windows Update in Windows 8 and upward at the time. Starting in 2021, however, this variant is the only publicly supported version of Flash Player.