# MA-571.022016: MyCERT Advisory - Adobe Releases Security Updates

**Date:** 10 Feb 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-571.022016  
**Advisory ID:** MA-571.022016

---

####
**1.0 Introduction**
Adobe has released security updates to address vulnerabilities in Connect, Experience Manager, Flash Player, and Photoshop CC and Bridge CC. Users and administrators are encouraged to review Adobe Security Bulletins APSB16-07, APSB16-05, APSB16-04, APSB16-03, and apply the necessary updates.
**2.0 Impact**
These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.
**3.0 Affected Products**
The affected products of Adobe is as listed in the Table 1:
|  |
| --- | --- | --- | **Product** | **Affected Versions** | **Platform** | Adobe Connect | 9.4.2 and earlier versions | Windows | Adobe Experience Manager | 6.1.0, 6.0.0 and 5.6.1 | Windows, Unix, Linux and OS X | Adobe Flash Player Desktop Runtime | 20.0.0.286 and earlier | Windows and Macintosh | Adobe Flash Player Extended Support Release | 18.0.0.326 and earlier | Windows and Macintosh | Adobe Flash Player for Google Chrome | 20.0.0.286 and earlier | Windows, Macintosh, Linux and ChromeOS | Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 20.0.0.272 and earlier | Windows 10 | Adobe Flash Player for Linux | 11.2.202.559 and earlier | Linux | AIR Desktop Runtime | 20.0.0.233 and earlier | Windows and Macintosh | AIR SDK | 20.0.0.233 and earlier | Windows, Macintosh, Android and iOS | AIR SDK & Compiler | 20.0.0.233 and earlier | Windows, Macintosh, Android and iOS | Adobe Photoshop CC | 16.1.1 (2015.1.1) and earlier versions | Windows and Macintosh | Adobe Bridge CC | 6.1.1 and earlier versions | Windows and Macintosh |
Table 1: Adobe Affected Product
**4.0 Recommendation**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products:
> **4.1** Adobe Connect 9.5.2 Release Notes
> <https://helpx.adobe.com/adobe-connect/release-note/adobe-connect-9-5-2-release-notes.html>.
>
> **Note:**
> The Adobe Connect 9.5.2 installer for customer on-premise deployments (all supported locales) will be available starting on Feb 11th, 2016. For more details on new features in Connect 9.5.2, please refer to the release notes.
>
> **4.2** Adobe Experience Manager updates.
>
> - Version 6.1.0:
>   <https://helpx.adobe.com/experience-manager/kb/aem61-available-hotfixes.html>
>
> - Version 6.0.0:
>   <https://helpx.adobe.com/experience-manager/kb/aem6-available-hotfixes.html>
>
> - Version 5.6.1:
>   <https://helpx.adobe.com/experience-manager/kb/cq561-available-hotfixes.html>
>
> **4.3** Adobe Flash Player updates:
>
> - Adobe Flash Player Desktop Runtime version 20.0.0.306
>   - Flash Player Download Center: <http://www.adobe.com/go/getflash>
>   - Flash Player Distribution:  <http://www.adobe.com/products/players/flash-player-distribution.html>
> - Adobe Flash Player Extended Support Release version 18.0.0.329
>   <http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
> - Adobe Flash Player for Google Chrome version 20.0.0.306
>   <http://googlechromereleases.blogspot.com/>
> - Adobe Flash Player for Microsoft Edge and Internet Explorer 11 version 20.0.0.306
>   <http://go.microsoft.com/fwlink/?LinkId=723603>
> - Adobe Flash Player for Internet Explorer 11 version 20.0.0.306
>   <http://go.microsoft.com/fwlink/?LinkId=723603>
> - Adobe Flash Player for Linux version 11.2.202.569
>   <http://www.adobe.com/go/getflash>
> - AIR Desktop Runtime version 20.0.0.260
>   <http://get.adobe.com/air/>
> - AIR SDK version 20.0.0.260
>   <http://www.adobe.com/devnet/air/air-sdk-download.html>
> - AIR SDK & Compiler version 20.0.0.260
>   <http://www.adobe.com/devnet/air/air-sdk-download.html>
>
> **4.4** Adobe Photoshop CC and Bridge CC updates:
>
> - Adobe Photoshop CC 2015 and Bridge CC
>
> > Photoshop CC 2015 and Bridge CC by launching each application, navigating to the Help menu, and clicking "Updates."  For more information, please refer this help page.
> > <https://helpx.adobe.com/creative-cloud/help/creative-cloud-2015-updates.html>
>
> - Adobe Photoshop CC 2014
>
> > Photoshop CC 2014.2.4 (15.2.4) update is only available via download using the links below:
>
> - Win (32-bit): <https://www.adobe.com/support/downloads/detail.jsp?ftpID=6015>
> - Win (64-bit): <https://www.adobe.com/support/downloads/detail.jsp?ftpID=6016>
> - Mac: <https://www.adobe.com/support/downloads/detail.jsp?ftpID=6017>
>
> **Note:**
> The 15.2.4 updates are not available by selecting Help > Updates from the application and will not show in the Applications & Updates section of the Creative Cloud application or the Creative Cloud Packager. Please download the patches directly from the links above.
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#97f4eef5f2e5aeaeaed7f4eef5f2e5e4f2f4e2e5fee3eeb9faee) or [[email protected]](/cdn-cgi/l/email-protection#c7aabea4a2b5b387aabea4a2b5b3e9a8b5a0e9aabe) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates:
<https://www.us-cert.gov/ncas/current-activity/2016/02/09/Adobe-Releases-Security-Updates-Connect-Experience-Manager-Flash>
- Security update available for Adobe Connect:
[https://helpx.adobe.com/security/products/connect/apsb16-07.html](https://helpx.adobe.com/security/products/acrobat/apsb16-02.html)
- Security updates available for Adobe Experience Manager:
<https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html>
- Security updates available for Adobe Flash Player:
<https://helpx.adobe.com/security/products/flash-player/apsb16-04.html>
- Security updates available for Adobe Photoshop CC and Bridge CC:
<https://helpx.adobe.com/security/products/photoshop/apsb16-03.html>