# MA-508.082015: MyCERT Advisory - Adobe Releases Security Update for LiveCycle Data Services

**Date:** 21 Aug 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-508.082015  
**Advisory ID:** MA-508.082015

---

#### **1.0 Introduction**
Adobe has released a security update to address vulnerability in LiveCycle Data Services(LCDS) versions 4.7, 4.6.2, 4.5, and 3.0.x. Users and administrators are encouraged to review Adobe Security Bulletin APSB15-20 and apply the necessary updates.
**2.0 Impact**
These updates address exploitation of this vulnerability may allow a remote attacker to obtain sensitive information from an affected system.
**3.0 Affected Products**
The affected products of Adobe LifeCycle Data Services are version 4.7, 4.6.2, 4.5, and 3.0.x for platforms Windows, Macintosh and Unix.
**4.0 Recommendation**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products:
> 4.1 Patches are available for the following LCDS versions:
>
> - LCDS 4.7.0.354169
>   <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-20/_jcr_content/main-pars/download/file.res/LCDS_4.7.0.zip>
>
> - LCDS 4.6.2.354169
>   <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-20/_jcr_content/main-pars/download_0/file.res/LCDS_4.6.2.zip>
>
> - LCDS 4.5.1.354169
>   <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-20/_jcr_content/main-pars/download_1/file.res/LCDS_4.5.1.zip>
>
> - LCDS 3.0.0.354170
>   <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-20/_jcr_content/main-pars/download_2/file.res/LCDS_3.0.0.zip>
>
> 4.2 This release resolves an issue associated with parsing crafted XML entities that could lead to information disclosure (CVE-2015-3269).
> <https://helpx.adobe.com/livecycle/kb/xxe-vulnerability-blazeDS.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#9bf8e2f9fee9a2a2a2dbf8e2f9fee9e8fef8eee9f2efe2b5f6e2) or [[email protected]](/cdn-cgi/l/email-protection#d0bda9b3b5a2a490bda9b3b5a2a4febfa2b7febda9) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Update for LiveCycle Data Services: <https://www.us-cert.gov/ncas/current-activity/2015/08/18/Adobe-Releases-Security-Update-LiveCycle-Data-Services>
- Security Hotfix Available for LiveCycle Data Services: <https://helpx.adobe.com/security/products/livecycleds/apsb15-20.html>