# MA-389.042014: MyCERT Advisory - Security Updates for Adobe Flash Player

**Date:** 30 Apr 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-389.042014  
**Advisory ID:** MA-389.042014

---

**1.0 Introduction**
Adobe has released a security update for Adobe Flash Player 13.0.0.182 and earlier versions for Windows, Adobe Flash Player 13.0.0.201 and earlier versions for Macintosh and Adobe Flash Player 11.2.202.350 and earlier versions for Linux.
**2.0 Impact**
These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system.
**3.0 Affected Products**
Listed below are the affected products:
- Adobe Flash Player 13.0.0.182 and earlier versions for Windows
- Adobe Flash Player 13.0.0.201 and earlier versions for Macintosh
- Adobe Flash Player 11.2.202.350 and earlier versions for Linux
**4.0 Recommendation**
Adobe recommends users to update their software by following either of these instructions below:
4.1 Adobe Flash Player 13.0.0.182 and earlier versions for Windows should update to Adobe Flash Player 13.0.0.206 via:
- [Flash Player Download Center](http://get.adobe.com/flashplayer/) or via the update mechanism within the product when prompted
4.2 Adobe Flash Player 13.0.0.182 and earlier versions for Windows (network distribution), should update to the newest version 13.0.0.206, please refer:
- [Flash Player Licensing](http://www.adobe.com/products/players/flash-player-distribution.html)
4.3 Adobe Flash Player 13.0.0.201 and earlier versions for Macintosh should update to Adobe Flash Player 13.0.0.206 via:
- [Flash Player Download Center](http://get.adobe.com/flashplayer/)
4.4 Adobe Flash Player 13.0.0.201 and earlier versions for Macintosh (network distribution), please refer:
- [Flash Player Licensing](http://www.adobe.com/products/players/flash-player-distribution.html)
4.5 Adobe Flash Player 11.2.202.350 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.356 via:
- [Flash Player Download Center](http://googlechromereleases.blogspot.com/)
4.6 Adobe Flash Player 13.0.0.182 installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 13.0.0.206 for Windows, Macintosh and Linux via:
- [Google Chrome Releases](http://googlechromereleases.blogspot.com/)
4.7 Adobe Flash Player 13.0.0.182 installed with Internet Explorer 10 will automatically be updated to the latest Internet Explorer 10 version, which will include Adobe Flash Player 13.0.0.206 for Windows 8.0. please refer:
- [Microsoft Security Advisory](https://technet.microsoft.com/library/security/2755801)
4.8 Adobe Flash Player 13.0.0.182 installed with Internet Explorer 11 will automatically be updated to the latest Internet Explorer 11 version, which will include Adobe Flash Player 13.0.0.206 for Windows 8.1. please refer:
- [Microsoft Security Advisory](https://technet.microsoft.com/library/security/2755801)
4.9 Adobe Flash Player 11.7.700.275 and earlier versions for Windows and Macintosh, who cannot update to Flash Player 13.0.0.206, Adobe has made available the update Flash Player 11.7.700.279\*, which can be downloaded at:
- [Download Here](http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html)
Note: Beginning of May 13, 2014, Adobe Flash Player 13 for Mac and Windows will replace version 11.7 as the extended support version. Adobe recommends users upgrade to version 13 to continue to receive security updates. Refer to this [blog post](http://blogs.adobe.com/flashplayer/2014/03/upcoming-changes-to-flash-players-extended-support-release.html) for further details.
Users can verify the version of Adobe Flash Player that browser has installed via [this link](http://www.adobe.com/software/flash/about/).
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#21425843445318181861425843445352444254534855580f4c58) or [[email protected]](/cdn-cgi/l/email-protection#325f4b51574046725f4b515740461c5d40551c5f4b)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : <https://www.mycert.org.my>
Twitter : <http://www.twitter.com/mycert>
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2014/04/28/Adobe-Releases-Security-Updates-Flash-Player>
- <http://helpx.adobe.com/security/products/flash-player/apsb14-13.html>
- <http://krebsonsecurity.com/2014/04/adobe-update-nixes-flash-player-zero-day/>