# MA-392.052014: MyCERT Advisory - Security updates for Adobe Flash Player

**Date:** 15 May 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-392.052014  
**Advisory ID:** MA-392.052014

---

**1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in Adobe Flash Player. Exploitation of these vulnerabilities could potentially allow an attacker to take control of the affected system.
**2.0 Impact**
These updates address vulnerabilities that could potentially allow an attacker to compromise and take control of the affected system.
**3.0 Affected Products**
Listed below are the affected products:
- Adobe Flash Player 13.0.0.206 and earlier versions for Windows and Mac
- Adobe Flash Player 11.2.202.356 and earlier versions for Linux
- Adobe AIR 13.0.0.83 SDK and earlier versions
- Adobe AIR 13.0.0.83 SDK & Compiler and earlier versions
**4.0Recommendation**
Adobe recommends users to update their software by following the instructions below:
> 4.1 Adobe Flash Player 13.0.0.206 and earlier versions for Windows and Mac, should update to version 13.0.0.214:
>
> - [Flash Player Download Center](http://www.adobe.com/go/getflash) or via the update mechanism within the product when prompted
>
> 4.2 Adobe Flash Player 13.0.0.206 and earlier versions (network distribution), should update to version 13.0.0.214:
>
> - [Flash Player Licensing](http://www.adobe.com/licensing/distribution)
>
> 4.3 Adobe Flash Player 11.2.202.356 and earlier versions for Linux, should update to version 11.2.202.359:
>
> - [Flash Player Download Center](http://www.adobe.com/go/getflash)
>
> 4.4 Adobe Flash Player 13.0.0.206 installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 13.0.0.214 for Windows, Macintosh and Linux via:
>
> - [Google Chrome Releases](http://googlechromereleases.blogspot.com/)
>
> 4.5 Adobe Flash Player 13.0.0.206 and earlier in Internet Explorer 10 for Windows 8.0, should update to version 13.0.0.214, kindly refer to:
>
> - [Microsoft Security Advisory](http://go.microsoft.com/fwlink/?LinkId=264959)
>
> 4.6 Adobe Flash Player 13.0.0.206 and earlier in Internet Explorer 11 for Windows 8.1, should update to version 13.0.0.214, kindly refer to:
>
> - [Microsoft Security Advisory](http://go.microsoft.com/fwlink/?LinkId=264959)
>
> 4.7 Adobe AIR 13.0.0.83 SDK and compiler, should update to version 13.0.0.111, which is available at:
>
> - [Adobe AIR SDK & Compiler](http://www.adobe.com/devnet/air/air-sdk-download.html)
>
> 4.8 Adobe AIR 13.0.0.83 SDK, should update to version 13.0.0.111, which is available at:
>
> - [Adobe AIR SDK](http://www.adobe.com/devnet/air/air-sdk-download.html)
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#3f5c465d5a4d0606067f5c465d5a4d4c5a5c4a4d564b46115246) or [[email protected]](/cdn-cgi/l/email-protection#ddb0a4beb8afa99db0a4beb8afa9f3b2afbaf3b0a4)
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
**5.0 References**
- US-CERT: Adobe Releases Security Updates for Reader, Acrobat, Flash Player, and Illustrator, May 2014 [online].
<https://www.us-cert.gov/ncas/current-activity/2014/05/13/Adobe-Releases-Security-Updates-Reader-and-Acrobat>
- Adobe Security Bulletin: Security updates available for Adobe Flash Player, May 2014 [online].
<http://helpx.adobe.com/security/products/flash-player/apsb14-14.html>
- AUSCERT, May 2014 [online]. <https://www.auscert.org.au/render.html?it=19650>