# MA-493.072015: MyCERT Advisory - Adobe Flash and Microsoft Windows Vulnerabilities

**Date:** 15 Jul 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-493.072015  
**Advisory ID:** MA-493.072015

---

#### **1.0 Introduction**
Adobe has released security updates for Adobe Flash Player for Windows. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.
**2.0 Impact**
The Adobe Flash vulnerabilities can allow a remote attacker to execute arbitrary code. Exploitation of the Adobe Type Manager vulnerability could then allow the attacker to execute code with system https://www.microsoft.com/en-us/download/details.aspx?id=46366 privileges.
**3.0 Affected Products**
Windows and Macintosh:
- Adobe Flash Player Desktop Runtime 18.0.0.194 and earlier
- Adobe Flash Player Extended Support Release 13.0.0.296 and earlier
- AIR Desktop Runtime 18.0.0.144 and earlier
Windows, Macintosh and Linux:
- Adobe Flash Player for Google Chrome 18.0.0.194 and earlier
Windows 8.0 and 8.1:
- Adobe Flash Player for Internet Explorer 10 and 11, 18.0.0.194 and earlier
Linux:
- Adobe Flash player 11.2.202.468 and earlier
Windows, Macintosh, Android and IOS:
- AIR SDK 18.0.0.144 and earlier
- AIR SDK & Compiler 18.0.0.144 and earlier
**4.0 Recommendation**
Users must apply the security updates immediately to fix the vulnerabilities, as below:
The Adobe Flash
- https://helpx.adobe.com/security/products/flash-player/apsb15-18.html
The Microsoft Windows Adobe Type Manager
- https://technet.microsoft.com/en-us/library/security/MS15-077
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection) or [[email protected]](/cdn-cgi/l/email-protection)
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: https://www.mycert.org.my
Twitter: http://www.twitter.com/mycert
Cyber999 Mobile Apps: IOS Users or Android Users
**5.0 References**
US-CERT: Adobe Releases Security Updates for Flash Player,
- https://www.us-cert.gov/ncas/alerts/TA15-195A
Adobe Security Bulletin: Security updates available for Adobe Flash Player,
- https://helpx.adobe.com/security/products/flash-player/apsb15-18.html
Additional information regarding the vulnerabilities in Vulnerability Notes
- http://www.kb.cert.org/vuls/id/561288
- http://www.kb.cert.org/vuls/id/338736
- http://www.kb.cert.org/vuls/id/918568
- http://www.kb.cert.org/vuls/id/103336