# MA-379.032014: MyCERT Alert - Security Updates for Adobe Flash Player

**Date:** 17 Mar 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-379.032014  
**Advisory ID:** MA-379.032014

---

**1.0 Introduction**
Adobe has released security updates to address important vulnerabilities in Adobe Flash Player 12.0.0.70 and earlier versions for Windows and Macintosh, and Adobe Flash Player 11.2.202.341 and earlier versions for Linux.
**2.0 Impact**
These updates address a critical vulnerability that could potentially allow an attacker to bypass the same origin policy (CVE-2014-0503) and to read the contents of the clipboard (CVE-2014-0504).
**3.0 Affected Products**
Adobe Flash Player security updates are available for the following versions:
- Adobe Flash Player 12.0.0.70 and earlier versions for Windows and Macintosh
- Adobe Flash Player 11.2.202.341 and earlier versions for Linux
**4.0 Recommendation**
Adobe recommends users to update their software installations by following the instructions below:
4.1 Adobe Flash Player 12.0.0.70 and earlier versions for Windows and Macintosh should update to the newest version 12.0.0.77 via:
- [Flash Player Download Center](http://get.adobe.com/flashplayer/) or via the update mechanism within the product when prompted
4.2 Adobe Flash Player 12.0.0.70 and earlier versions (network distribution), should update to the newest version 12.0.0.77, please refer:
- [Flash Player Licensing](http://www.adobe.com/licensing/distribution)
4.3 Adobe Flash Player 11.2.202.341 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.346 via:
- [Flash Player Download Center](http://get.adobe.com/flashplayer/)
4.4 Adobe Flash Player 12.0.0.70 installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 12.0.0.77 for Windows, Macintosh and Linux, please refer:
- [Google Chrome Releases](http://googlechromereleases.blogspot.com/)
4.5 Adobe Flash Player 12.0.0.70 installed with Internet Explorer 10 will automatically be updated to the latest Internet Explorer 10 version, which will include Adobe Flash Player 12.0.0.77 for Windows 8.0, please refer:
- [Microsoft Security Advisory](http://technet.microsoft.com/en-us/security/advisory/2755801)
4.6 Adobe Flash Player 12.0.0.70 installed with Internet Explorer 11 will automatically be updated to the latest Internet Explorer 11 version, which will include Adobe Flash Player 12.0.0.77 for Windows 8.1, please refer:
- [Microsoft Security Advisory](http://technet.microsoft.com/en-us/security/advisory/2755801)
Users can verify the version of Adobe Flash Player that browser has installed via [this link](http://www.adobe.com/software/flash/about/).
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#45263c2720377c7c7c05263c27203736202630372c313c6b283c) or [[email protected]](/cdn-cgi/l/email-protection#3d50445e584f497d50445e584f4913524f5a135044)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
**5.0 References**
- <http://www.us-cert.gov/ncas/current-activity/2014/03/12/Security-Updates-Available-Adobe-Flash-Player>
- <http://helpx.adobe.com/security/products/flash-player/apsb14-08.html>
- <http://krebsonsecurity.com/2014/03/adobe-microsoft-push-security-updates/>