# MA-478.052015: MyCERT Advisory - Adobe Releases Security Updates for Flash Player, Reader, and Acrobat

**Date:** 13 May 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-478.052015  
**Advisory ID:** MA-478.052015

---

#### **1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in Flash Player, Reader, and Acrobat. Users and administrators are encouraged to review Adobe Security Bulletins APSB15-09 and APSB15-10 and apply the necessary updates.
**2.0 Impact**
These updates address vulnerabilities that could potentially allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
The detail lists of the affected products are as below:
- Adobe Flash Player 17.0.0.169 and earlier versions
- Adobe Flash Player 13.0.0.281 and earlier 13.x versions
- Adobe Flash Player 11.2.202.457 and earlier 11.x versions
- AIR Desktop Runtime 17.0.0.144 and earlier versions
- AIR SDK and SDK & Compiler 17.0.0.144 and earlier versions
- Adobe Reader XI (11.0.10) and earlier 11.x versions for Windows and Macintosh
- Adobe Reader X (10.1.13) and earlier 10.x versions  for Windows and Macintosh
- Adobe Acrobat XI (11.0.10) and earlier 11.x versions  for Windows and Macintosh
- Adobe Acrobat X (10.1.13) and earlier 10.x versions for Windows and Macintosh
**4.0 Recommendation**
Adobe recommends users to update their software by following either of these instructions below:
**4.1 Adobe Flash Player**
4.1.1 Adobe Flash Player Desktop Runtime for Windows and Macintosh, should update to version 17.0.0.188, via:
- Flash Player Download Center:
<http://get.adobe.com/flashplayer/>
- or  update mechanism within the product when prompted
4.1.2 Adobe Flash Player Extended Support Release should update to version 13.0.0.289, via:
- Extended Support
<https://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
4.1.3 Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.460, via:
- Flash Player Download Center
<https://get.adobe.com/flashplayer/>
4.1.4 Adobe Flash Player installed with Google Chrome will be automatically updated to the latest Google Chrome version, which will include Adobe Flash Player 17.0.0.188, please refer:
- Google Chrome Releases
<http://googlechromereleases.blogspot.com/>
4.1.5 Adobe Flash Player installed with Internet Explorer 10 and Internet Explorer 11 for Windows 8.x will be automatically updated to the latest version, which will include Adobe Flash Player 17.0.0.188, please refer:
- Microsoft Security Advisory
<https://technet.microsoft.com/library/security/2755801>
4.1.6 Adobe AIR desktop runtime should update to version 17.0.0.172, please refer:
- AIR Download Center
<https://get.adobe.com/air/>
4.17 Adobe AIR SDK should update to version 17.0.0.172, please refer:
- AIR SDK Download
<http://www.adobe.com/devnet/air/air-sdk-download.html>
4.18 Adobe AIR SDK & Compiler should update to version 17.0.0.172, please refer:
- AIR SDK Download
<http://www.adobe.com/devnet/air/air-sdk-download.html>
**4.2 Adobe Acrobat and Reader**
The product's default update mechanism is set to run automatic update checks on a regular schedule. Update checks can be manually activated by choosing Help > Check for Updates.
4.2.1 Adobe Reader and Acrobat update:
- Adobe Reader users on Windows
<http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows>
- Adobe Reader users on Macintosh
<http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh>
- Acrobat Standard and Pro users on Windows
<http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
- Acrobat Pro users on Macintosh
<http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#c3a0baa1a6b1fafafa83a0baa1a6b1b0a6a0b6b1aab7baedaeba) or [[email protected]](/cdn-cgi/l/email-protection#b4d9cdd7d1c6c0f4d9cdd7d1c6c09adbc6d39ad9cd) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates for Flash Player, Reader and Acrobat
<https://www.us-cert.gov/ncas/current-activity/2015/05/12/Adobe-Releases-Security-Updates-Flash-Player-Reader-and-Acrobat>
- Security Updates Available for Adobe Flash Player
<https://helpx.adobe.com/security/products/flash-player/apsb15-09.html>
- Security Updates Available for Adobe Reader and Acrobat
<https://helpx.adobe.com/security/products/reader/apsb15-10.html>