# MA-407.072014: MyCERT Advisory - Security updates for Adobe Flash Player and Air

**Date:** 09 Jul 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-407.072014  
**Advisory ID:** MA-407.072014

---

**1.0    Introduction**
Adobe has released security updates to address multiple vulnerabilities in Flash Player and Air. Exploitation of these vulnerabilities could potentially allow an attacker to take control of the affected system.
**2.0    Impact**
Exploitation of these vulnerabilities could potentially allow an attacker to take control of the affected system.
**3.0    Affected Products**
- Adobe Flash Player 14.0.0.125 and earlier versions for Windows and Macintosh
- Adobe Flash Player 11.2.202.378 and earlier versions for Linux
- Adobe AIR 14.0.0.110 SDK and earlier versions
- Adobe AIR 14.0.0.110 SDK & Compiler and earlier versions
- Adobe AIR 14.0.0.110 and earlier versions for Android
**4.0    Recommendation**
Adobe recommends users to update their software by following either of these instructions below:
- Flash Player 14.0.0.125 and earlier versions for Windows and Macintosh should update to 14.0.0.145 via this URL:
[Flash Player Download Center](http://www.adobe.com/go/getflash)
- Flash Player 14.0.0.125 and earlier versions (network distribution) should update to 14.0.0.145 via this URL:
[Flash Player Licensing](http://www.adobe.com/licensing/distribution)
- Flash Player 11.2.202.378 and earlier for Linux should update to 11.2.202.394 via this URL:
[Flash Player Download Center](http://www.adobe.com/go/getflash)
- Flash Player 14.0.0.125 and earlier for Chrome (Windows, Macintosh and Linux) should update to 14.0.0.145 via this URL:
[Google Chrome Releases](http://googlechromereleases.blogspot.com/)
- Flash Player 14.0.0.125 and earlier in Internet Explorer 10 for Windows 8.0 should update to 14.0.0.145 via this URL:
[Microsoft Security Advisory](http://go.microsoft.com/fwlink/?LinkId=264959)
- Flash Player 14.0.0.125 and earlier in Internet Explorer 11 for Windows 8.1 should update to 14.0.0.145 via this URL:
[Microsoft Security Advisory](http://go.microsoft.com/fwlink/?LinkId=264959)
- AIR 14.0.0.110 SDK & Compiler and earlier versions should update to 14.0.0.137 via this URL:
[AIR SDK Download](http://www.adobe.com/devnet/air/air-sdk-download.html)
- AIR 14.0.0.110 SDK and earlier versions should update to 14.0.0.137 via this URL:
[AIR SDK Download](http://www.adobe.com/devnet/air/air-sdk-download.html)
- AIR 14.0.0.110 and earlier versions for Android should update to 14.0.0.137 via this URL:
[Google Play](https://play.google.com/store/apps/details?id=com.adobe.air)
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#84e7fde6e1f6bdbdbdc4e7fde6e1f6f7e1e7f1f6edf0fdaae9fd) or [[email protected]](/cdn-cgi/l/email-protection#6f02160c0a1d1b2f02160c0a1d1b41001d08410216)
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
**5.0    References**
- US-CERT: Adobe Releases Security Updates for Flash Player and Air, July 2014 [online]. <http://www.us-cert.gov/ncas/current-activity/2014/07/08/Adobe-Releases-Security-Updates-Flash-Player-and-Air>
- Adobe Security Bulletin: Security updates available for Adobe Flash Player, July 2014 [online]. <http://helpx.adobe.com/security/products/flash-player/apsb14-17.html>
- AusCERT: ESB-2014.1111, July 2014 [online]. <https://www.auscert.org.au/render.html?it=20059>