# MA-387.042014: MyCERT Advisory - Security update for Adobe Reader Mobile

**Date:** 19 Apr 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-387.042014  
**Advisory ID:** MA-387.042014

---

**1.0 Introduction**
Adobe has released a security update to address important vulnerabilities in Adobe Reader Mobile 11.1.3 and earlier versions for Android operating system.
This update resolves vulnerability in the implementation of JavaScript APIs that could be exploited to execute arbitrary code (CVE-2014-0514). Adobe recommends users to update their product installations to latest product.
**2.0 Impact**
These updates address a vulnerability that could be exploited that allows a remote attacker to execute arbitrary code via a crafted PDF document.
**3.0 Affected Products**
Adobe Reader Mobile updates is available for the following version:
- Adobe Reader Mobile 11.1.3 and earlier for Android
**4.0 Recommendation**
Adobe recommends users to update their Adobe Reader Mobile to the newest version software installations via:
- <https://play.google.com/store/apps/details?id=com.adobe.reader>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#7c1f051e190e4545453c1f051e190e0f191f090e150805521105) or [[email protected]](/cdn-cgi/l/email-protection#9ef3e7fdfbeceadef3e7fdfbeceab0f1ecf9b0f3e7)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : <https://www.mycert.org.my>
Twitter : <http://www.twitter.com/mycert>
**5.0 References**
- <http://helpx.adobe.com/security/products/reader-mobile/apsb14-12.html>
- <https://www.us-cert.gov/ncas/current-activity/2014/04/17/Adobe-Releases-Security-Update-Reader-Mobile>
- <http://www.securify.nl/advisory/SFY20140401/adobe_reader_for_android_exposes_insecure_javascript_interfaces.html>