# MA-537.112015: MyCERT Advisory - Adobe Releases Security Updates for ColdFusion, LiveCycle Data Services, and Adobe Premiere Clip

**Date:** 24 Nov 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-537.112015  
**Advisory ID:** MA-537.112015

---

#### **1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in ColdFusion, LiveCycle Data Services, and Adobe Premiere Clip. Users and administrators are encouraged to review Adobe Security Bulletins for ColdFusion, LiveCycle Data Services, and Adobe Premier Clip and apply the necessary updates.
**2.0 Impact**
These updates address exploitation of this vulnerability may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
The affected products of Adobe  is as listed in the Table 1:
|  |
| --- | --- | --- | **Product** | **Affected Versions** | **Platform** | ColdFusion 11 | Update 6 and earlier versions | All | ColdFusion 10 | Update 17 and earlier versions | All | LiveCycle Data Services | 4.7, 4.6.2, 4.5, 3.1.x, 3.0.x | Windows, Macintosh and Unix | Adobe Premiere Clip | 1.1.1 and earlier for iOS | iOS |
Table 1: Adobe Affected Product
**4.0 Recommendation**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products:
> **4.1 Adobe Cold Fusion**
>
> ColdFusion 11:
> <http://helpx.adobe.com/coldfusion/kb/coldfusion-11-update-7.html>
> ColdFusion 10:
> <http://helpx.adobe.com/coldfusion/kb/coldfusion-10-update-18.html>
>
> Note :
> User should apply the security configuration settings as outlined on the ColdFusion Security page :
> <https://wikidocs.adobe.com/wiki/display/coldfusionen/Administering+ColdFusion+Security>
> as well as review the :
> ColdFusion 11 Lockdown Guide:
> <http://www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/cf11/cf11-lockdown-guide.pdf>
> ColdFusion 10 Lockdown Guide:
> <http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion-enterprise/pdf/cf10-lockdown-guide.pdf>
>
> **4.2Adobe LiveCycle Data Services**
>
> Updates available for version :
> 4.7.0.354178 –
> <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-30/_jcr_content/main-pars/download/file.res/LCDS_4.7.0.354178.zip>
>
> 4.6.2.354178 –
> <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-30/_jcr_content/main-pars/download_0/file.res/LCDS_4.6.2.354178.zip>
>
> 4.5.1.354177 –
> <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-30/_jcr_content/main-pars/download_1/file.res/LCDS_4.5.1.354177.zip>
>
> 3.1.0.354180 –
> <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-30/_jcr_content/main-pars/download_3/file.res/LCDS_3.1.0.354180.zip>
>
> 3.0.0.354175 –
> <https://helpx.adobe.com/content/help/en/security/products/livecycleds/apsb15-30/_jcr_content/main-pars/download_2/file.res/LCDS_3.0.0.354175.zip>
>
> **4.3 Adobe Premiere Clip for iOS**
>
> Updates available here:
> <https://itunes.apple.com/us/app/adobe-premiere-clip/id919399401>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#60031902051259595920031902051213050315120914194e0d19) or [[email protected]](/cdn-cgi/l/email-protection#24495d4741565064495d474156500a4b56430a495d) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates for ColdFusion, LiveCycle Data Services, and Adobe Premiere Clip :
<https://www.us-cert.gov/ncas/current-activity/2015/11/17/Adobe-Releases-Security-Updates-ColdFusion-LiveCycle-Data-Services>
- Security Update: Hotfix available for ColdFusion:
<https://helpx.adobe.com/security/products/coldfusion/apsb15-29.html>
- Security Update Available for LiveCycle Data Services :
<https://helpx.adobe.com/security/products/livecycleds/apsb15-30.html>
- Security update available for Adobe Premiere Clip:
<https://helpx.adobe.com/security/products/premiereclip/apsb15-31.html>