# MA-374.022014: MyCERT Alert - Security Updates for Adobe Flash Player

**Date:** 21 Feb 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-374.022014  
**Advisory ID:** MA-374.022014

---

**1.0 Introduction**
Adobe has released security updates to address vulnerability for Adobe Flash Player 12.0.0.44 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.336 and earlier versions for Linux.
**2.0 Impact**
These updates address a critical vulnerability that could potentially allow an attacker to remotely take control of the affected system.
**3.0 Affected Products**
Adobe Flash Player security updates are available for the following versions:
- Adobe Flash Player 12.0.0.44 and earlier versions for Windows and Macintosh
- Adobe Flash Player 11.2.202.336 and earlier versions for Linux
- Adobe AIR 4.0.0.1390 and earlier versions for Android
- Adobe AIR 3.9.0.1390 SDK and earlier versions
- Adobe AIR 3.9.0.1390 SDK & Compiler and earlier versions
**4.0 Recommendation**
Adobe recommends users update their software installations by following the instructions below:
> 4.1 Adobe Flash Player 12.0.0.44 and earlier versions for Windows and Macintosh should update to Adobe Flash Player 12.0.0.70 via:
>
> - [Flash Player Download Center](http://www.adobe.com/go/getflash) or from update mechanism within the product when prompted.
>
> 4.2 Adobe Flash Player 12.0.0.44 and earlier versions (network distribution) should update to Adobe Flash Player 12.0.0.70, please refer to:
>
> - [Flash Player Licensing](http://www.adobe.com/licensing/distribution)
>
> 4.3 Adobe Flash Player 11.2.202.336 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.341 via:
>
> - [Flash Player Download Center](http://www.adobe.com/go/getflash)
>
> 4.4 Adobe Flash Player 12.0.0.44 installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 12.0.0.70 for Windows, Macintosh and Linux via:
>
> - [Google Chrome Releases](http://googlechromereleases.blogspot.com/)
>
> 4.5 Adobe Flash Player 12.0.0.44 installed with Internet Explorer 10 will automatically be updated to the latest Internet Explorer 10 version, which will include Adobe Flash Player 12.0.0.70 for Windows 8.0, please refer:
>
> - [Microsoft Security Advisory](http://go.microsoft.com/fwlink/?LinkId=264959)
>
> 4.6 Adobe Flash Player 12.0.0.44 installed with Internet Explorer 11 will automatically be updated to the latest Internet Explorer 11 version, which will include Adobe Flash Player 12.0.0.70 for Windows 8.1, please refer:
>
> - [Microsoft Security Advisory](http://go.microsoft.com/fwlink/?LinkId=264959)
>
> 4.7 Adobe AIR 4.0.0.1390 and earlier versions for Android should update to Adobe AIR 4.0.0.1628 via:
>
> - [Google Play](http://market.android.com/details?id=com.adobe.air)
>
> 4.8 Adobe AIR 4.0.0.1390 SDK and earlier versions should update to the Adobe AIR 4.0.0.1628 SDK via:
>
> - [AIR SDK Download](http://www.adobe.com/devnet/air/air-sdk-download.html)
>
> 4.9 Adobe AIR 4.0.0.1390 SDK & Compiler and earlier versions should update to the Adobe AIR 4.0.0.1628 SDK & Compiler via:
>
> - [AIR SDK Download](http://www.adobe.com/devnet/air/air-sdk-download.html)
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#2c4f554e495e1515156c4f554e495e5f494f595e455855024155) or [[email protected]](/cdn-cgi/l/email-protection#e78a9e84829593a78a9e84829593c9889580c98a9e)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: <https://www.mycert.org.my>
**5.0 References**
- <http://helpx.adobe.com/security/products/flash-player/apsb14-07.html>
- <https://www.us-cert.gov/ncas/current-activity/2014/02/20/Security-Updates-Available-Adobe-Flash-Player>