# MA-363.012013: MyCERT Alert - Security Updates for Adobe Flash Player

**Date:** 14 Nov 2013  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-363.012013  
**Advisory ID:** MA-363.012013

---

**1.0 Introduction**
Adobe has released six security updates on November  12, 2013 where all of them are rated Critical.
**2.0 Impact**
These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system.
**3.0 Affected Products**
- Adobe Flash Player 11.9.900.117 and earlier versions for Windows and Macintosh
- Adobe Flash Player 11.2.202.310  and earlier versions for Linux
- Adobe AIR 3.9.0.1030 and earlier versions for Windows and Macintosh
- Adobe AIR 3.9.0.1060 and earlier versions for Android
- Adobe AIR 3.9.0.1030 SDK and earlier versions
- Adobe AIR 3.9.0.1030 SDK & Compiler and earlier versions
**4.0 Recommendation**
MyCERT recommends users update their software installations by following the instructions below:
> 4.1 Users of Adobe Flash Player 11.9.900.117 and earlier versions for Windows and Macintosh update to the newest version 11.9.900.152 by downloading it from the Adobe Flash Player Download Center, or via the update mechanism within the product when prompted.
>
> - <http://get.adobe.com/flashplayer/>
>
> 4.2 Users of Adobe Flash Player 11.2.202.310 and earlier versions for Linux update to Adobe Flash Player 11.2.202.327 by downloading it from the Adobe Flash Player Download Center.
>
> - <http://get.adobe.com/flashplayer/>
>
> 4.3 For users of Flash Player 11.7.700.242 and earlier versions for Windows and Macintosh, who cannot update to Flash Player 11.9.900.152, Adobe has made available the update Flash Player 11.7.700.252, which can be downloaded below.
>
> - <http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
>
> *Note:  Beginning July 9, 2013, Adobe Flash Player 11.7.x replaced version 10.3.x as the extended support version.  Adobe recommends users upgrade to version 11.7.x in order to continue to receive security updates.*
>
> 4.4 Adobe Flash Player 11.9.900.117 installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 11.9.900.152 for Windows, Macintosh and Linux.
>
> 4.5 Adobe Flash Player 11.9.900.117 installed with Internet Explorer 10 will automatically be updated to the latest Internet Explorer 10 version, which will include Adobe Flash Player 11.9.900.152 for Windows 8.0
>
> 4.6 Adobe Flash Player 11.9.900.117 installed with Internet Explorer 11 will automatically be updated to the latest Internet Explorer 11 version, which will include Adobe Flash Player 11.9.900.152 for Windows 8.1
>
> 4.7 Users of Adobe AIR 3.9.0.1030 and earlier versions for Windows and Macintosh should update to Adobe AIR 3.9.0.1210.
>
> - <http://get.adobe.com/air/>
>
> 4.8 Users of the Adobe AIR 3.9.0.1030 SDK should update to the Adobe AIR 3.9.0.1210 SDK.
>
> - <http://www.adobe.com/devnet/air/air-sdk-download.html>
>
> 4.9 Users of the Adobe AIR 3.9.0.1030 SDK & Compiler and earlier versions should update to the Adobe AIR 3.9.0.1210 SDK & Compiler.
>
> - <http://www.adobe.com/devnet/air/air-sdk-download.html>
>
> 5.0 Users of the Adobe AIR  3.9.0.1060 and earlier versions for Android should update to Adobe AIR   3.9.0.1210 by browsing to Google play on an Android device.
>
> - <https://play.google.com/store/apps/details?id=com.adobe.air>
Please refer the Solution section in <http://www.adobe.com/support/security/bulletins/apsb13-26.html>
MyCERT generally advise users to keep themselves updated with the latest security announcements by the vendor. For further assistance, please reach us through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#dab7a3b9bfa8ae9ab7a3b9bfa8aef4b5a8bdf4b7a3)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
- <http://www.adobe.com/support/security/bulletins/apsb13-26.html>
- <http://www.us-cert.gov/ncas/current-activity/2013/11/13/Adobe-Releases-Security-Updates-Adobe-Flash-Player>