# MA-551.122015: MyCERT Advisory - Adobe Releases Security Updates for Flash Player

**Date:** 30 Dec 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-551.122015  
**Advisory ID:** MA-551.122015

---

####
**1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in Flash Player.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
|  |
| --- | --- | --- | Product | Affected Versions | Platform | Adobe Flash Player Desktop Runtime | 20.0.0.235 and earlier | Windows and Macintosh | Adobe Flash Player Extended Support Release | 18.0.0.268 and earlier | Windows and Macintosh | Adobe Flash Player for Google Chrome | 20.0.0.228 and earlier | Windows, Macintosh, Linux and ChromeOS | Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 20.0.0.228 and earlier | Windows 10 | Adobe Flash Player for Internet Explorer 10 and 11 | 20.0.0.228 and earlier | Windows 8.0 and 8.1 | Adobe Flash Player for Linux | 11.2.202.554 and earlier | Linux | AIR Desktop Runtime | 20.0.0.204 and earlier | Windows and Macintosh | AIR SDK | 20.0.0.204 and earlier | Windows, Macintosh, Android and iOS | AIR SDK & Compiler | 20.0.0.204 and earlier | Windows, Macintosh, Android and iOS | AIR for Android | 20.0.0.204 and earlier | Android |
**4.0 Recommendation**
Adobe recommends users to update their software to the latest version by following these instructions below:
- Flash Player Desktop Runtime of earlier versions should update to 20.0.0.267 via this URL:
<http://www.adobe.com/go/getflash>
- Flash Player Extended Support Release 18.0.0.324 via this URL:
<http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
- Flash Player for Google Chrome
<http://googlechromereleases.blogspot.com/>
- Flash Player for Microsoft Edge and Internet Explorer 11 via this URL:
<http://go.microsoft.com/fwlink/?LinkId=264959>
- Flash Player 11.2.202.559 for Linux via this URL:
<http://www.adobe.com/go/getflash>
- AIR Desktop Runtime
<http://get.adobe.com/air/>
- AIR SDK
<http://www.adobe.com/devnet/air/air-sdk-download.html>
- AIR SDK & Compiler
<http://www.adobe.com/devnet/air/air-sdk-download.html>
- AIR for Android
<https://play.google.com/store/apps/details?id=com.adobe.air>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#f7948e959285cececeb7948e95928584929482859e838ed99a8e) or [[email protected]](/cdn-cgi/l/email-protection#d2bfabb1b7a0a692bfabb1b7a0a6fcbda0b5fcbfab) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2015/12/28/Adobe-Releases-Security-Updates-Flash-Player>
- <https://helpx.adobe.com/security/products/flash-player/apsb16-01.html>