# MA-520.092015: MyCERT Advisory - Adobe Releases Security Updates for Flash Player

**Date:** 22 Sep 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-520.092015  
**Advisory ID:** MA-520.092015

---

#### **1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in Flash Player for Windows, Macintosh, ChromeOS, and Linux. Users and administrators are encouraged to review Adobe Security Bulletin APSB15-23 and apply the necessary updates.
**2.0 Impact**
These updates address exploitation of this vulnerability may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
The affected products of Adobe Flash Player is as listed in the Table 1:
|  |
| --- | --- | --- | **Product** | **Affected Versions** | **Platform** | Adobe Flash Player Desktop Runtime | 18.0.0.232 and earlier | Windows and Macintosh | Adobe Flash Player Extended Support Release | 18.0.0.232 and earlier | Windows and Macintosh | Adobe Flash Player for Google Chrome | 18.0.0.233 and earlier | Windows, Macintosh, Linux and ChromeOS | Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 18.0.0.232 and earlier | Windows 10 | Adobe Flash Player for Internet Explorer 10 and 11 | 18.0.0.232 and earlier | Windows 8.0 and 8.1 | Adobe Flash Player for Linux | 11.2.202.508 and earlier | Linux | AIR Desktop Runtime | 18.0.0.199 and earlier | Windows and Macintosh | AIR SDK | 18.0.0.199 and earlier | Windows, Macintosh, Android and iOS | AIR SDK & Compiler | 18.0.0.180 and earlier | Windows, Macintosh, Android and iOS | AIR for Android | 18.0.0.143 and earlier | Android |
Table 1: Adobe Flash Player Affected Product
**4.0 Recommendation**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products:
4.1 Adobe Flash Player Desktop Runtime for Windows and Macintosh, should update to version 19.0.0.185, via:
- Flash Player Download Center:
<http://get.adobe.com/flashplayer/>
- or  update mechanism within the product when prompted
4.2 Adobe Flash Player Extended Support Release should update to version 18.0.0.241, via:
- Extended Support
<https://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
4.3 Adobe Flash Player for Google Chrome should update to Adobe Flash Player 19.0.0.185, via:
- Google Chrome Releases
<http://googlechromereleases.blogspot.my/>
4.4 Adobe Flash Player for Microsoft Edge and Internet Explorer 11, should update to Adobe Flash Player 19.0.0.185, via:
- Microsoft Security Advisory
<https://technet.microsoft.com/en-us/library/security/2755801>
4.5 Adobe Flash Player installed with Internet Explorer 10 and Internet Explorer 11 for Windows 8.x will be automatically updated to the latest version, which will include Adobe Flash Player 19.0.0.185, please refer:
- Microsoft Security Advisory
<https://technet.microsoft.com/en-us/library/security/2755801>
4.6 Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.521, via:
- Flash Player Download Center
<https://get.adobe.com/flashplayer/>
4.7 Adobe AIR desktop runtime, AIR SDK and AIR SDK & Compiler update to version 19.0.0.190 by visiting:
- AIR download center or
<http://get.adobe.com/air/>
- AIR developer center
<http://www.adobe.com/devnet/air/air-sdk-download.html>
4.8 AIR for Android update to version 19.0.0.190 by visiting:
- Google Play Store
<https://play.google.com/store/apps/details?id=com.adobe.air>
Assistance page in installing Flash Player:
<https://helpx.adobe.com/flash-player.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#a1c2d8c3c4d3989898e1c2d8c3c4d3d2c4c2d4d3c8d5d88fccd8) or [[email protected]](/cdn-cgi/l/email-protection#4d20342e283f390d20342e283f3963223f2a632034) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates for Flash Player:
<https://www.us-cert.gov/ncas/current-activity/2015/09/21/Adobe-Releases-Security-Update-Flash-Player>
- Adobe Security Bulletin:
<https://helpx.adobe.com/security/products/flash-player/apsb15-23.html>