# MA-488.072015: MyCERT Advisory - Adobe Releases Security Updates for Flash Player

**Date:** 09 Jul 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-488.072015  
**Advisory ID:** MA-488.072015

---

#### **1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in Flash Player for Windows, Macintosh and Linux.
**2.0 Impact**
Exploitation of these vulnerabilities could potentially allow an attacker to take control of the affected system.
**3.0 Affected Products**
Windows and Macintosh:
- Adobe Flash Player Desktop Runtime 18.0.0.194 and earlier
- Adobe Flash Player Extended Support Release 13.0.0.296 and earlier
- AIR Desktop Runtime 18.0.0.144 and earlier
Windows, Macintosh and Linux:
- Adobe Flash Player for Google Chrome 18.0.0.194 and earlier
Windows 8.0 and 8.1:
- Adobe Flash Player for Internet Explorer 10 and 11, 18.0.0.194 and earlier
Linux:
- Adobe Flash player 11.2.202.468 and earlier
Windows, Macintosh, Android and IOS:
- AIR SDK 18.0.0.144 and earlier
- AIR SDK & Compiler 18.0.0.144 and earlier
**4.0 Recommendation**
Adobe recommends users update their product to the latest version by following the links provided below:
- Flash Player Desktop Runtime of earlier versions should update to 18.0.0.203 via this URL:
[Flash Player Download Center](http://www.adobe.com/go/getflash)
[Flash Player Distribution](http://www.adobe.com/products/players/flash-player-distribution.html)
- Flash Player Extended Support Release:
[Extended Support](https://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html)
- Flash Player for Linux of earlier versions should update to 11.2.202.481 via this URL:
[Flash Player Download Center](http://www.adobe.com/go/getflash)
- Flash Player for Google Chrome:
[Google Chrome Releases](http://googlechromereleases.blogspot.com)
- Flash Player for Internet Explorer 10 and 11 of earlier versions should update to 18.0.0.203 via this URL:
[Microsoft Security Advisory](http://go.microsoft.com/fwlink/?LinkId=264959)
- AIR Desktop Runtime of earlier versions should update to 18.0.0.180
[AIR Download Center](http://get.adobe.com/air/)
- AIR SDK of earlier versions should update to 18.0.0.180
[AIR SDK Download](http://www.adobe.com/devnet/air/air-sdk-download.html)
- AIR SDK of earlier versions should update to 18.0.0.180
[AIR SDK Download](http://www.adobe.com/devnet/air/air-sdk-download.html)
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#debda7bcbbace7e7e79ebda7bcbbacadbbbdabacb7aaa7f0b3a7) or [[email protected]](/cdn-cgi/l/email-protection#4b2632282e393f0b2632282e393f6524392c652632) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Security Intelligence blog,
<http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/>
- US-CERT: Adobe Releases Security Updates for Flash Player,
<https://www.us-cert.gov/ncas/current-activity/2015/07/08/Adobe-Releases-Security-Updates-Flash-Player>
- Adobe Security Bulletin: Security updates available for Adobe Flash Player,
<http://helpx.adobe.com/security/products/flash-player/apsb15-16.html>