# MA-324.082012: MyCERT Alert - Critical Vulnerability in Adobe Flash Player

**Date:** 15 Aug 2012  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-324.082012  
**Advisory ID:** MA-324.082012

---

**1.0 Introduction**
A critical vulnerability (CVE-2012-1535) has been identified in Adobe Flash Player 11.3.300.270 and earlier versions for Windows, Macintosh and Linux.
This vulnerability allows a remote attacker to execute arbitrary code on a vulnerable version of Adobe Flash Player. User interaction is required where a user must visit a malicious website or opening a file which is embedded with a specially crafted SWF file. This vulnerability would cause the application to crash and could potentially allow attacker to take control of the affected system. [1]
**2.0 Impact**
By exploiting this vulnerability, an attacker could execute arbitrary code on vulnerable installations of Adobe Flash and gain the same privilege as the user. This vulnerability could be exploited to install malware on the user's computer.
**3.0 Affected Products**
Products listed below are vulnerable to this vulnerability:
- Adobe Flash Player 11.3.300.270 and earlier versions for Windows, Macintosh and Linux operating systems
**4.0 Recommendations**
MyCERT recommends users of Adobe Flash Player to upgrade to the newest version by downloading it from the following URL:
<http://get.adobe.com/flashplayer/>
Users may also consider using a vulnerability management tool such as Secunia to ensure that all applications are updated:
<http://secunia.com/vulnerability_scanning/personal/>
MyCERT generally advise users to keep themselves updated with the latest security announcements by the vendor. In case the public receives any suspicious URL or .SWF file, and requires our further analysis, please reach us through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#660b1f05031412260b1f0503141248091401480b1f)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
1. <http://www.adobe.com/support/security/bulletins/apsb12-18.html>