# MA-582.032016: MyCERT Advisory - Adobe Releases Security Updates for Acrobat, Reader, and Digital Editions

**Date:** 09 Mar 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-582.032016  
**Advisory ID:** MA-582.032016

---

####
**1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in Acrobat, Reader, and Digital Editions. Users and administrators are encouraged to review Adobe Security Bulletins APSB16-09 and APSB16-06 and apply the necessary updates.
**2.0 Impact**
These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.
**3.0 Affected Products**
The affected products of Adobe is as listed in the Table 1:
|  |
| --- | --- | --- | **Product** | **Affected Versions** | **Platform** | Acrobat DC (Continuous) | 15.010.20059 and earlier versions | Windows and Macintosh | Acrobat Reader DC (Continuous) | 15.010.20059 and earlier versions | Windows and Macintosh | Acrobat DC (Classic) | 15.006.30119 and earlier versions | Windows and Macintosh | Acrobat Reader DC (Classic) | 15.006.30119 and earlier versions | Windows and Macintosh | Acrobat XI | 11.0.14 and earlier versions | Windows and Macintosh | Reader XI | 11.0.14 and earlier versions | Windows and Macintosh | Adobe Digital Editions | 4.5.0 and earlier versions | Windows, Macintosh, iOS and Android |
Table 1: Adobe Affected Product
**4.0 Recommendation**
MyCERT highly recommended users or administrators of these applications to upgrade to the latest version of the affected products:
> 4.1 Acrobat DC Continuous update to version 15.010.20060
>
> > Window:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> 4.2 Acrobat Reader DC Continuous update to version 15.010.20060
>
> > <https://get.adobe.com/reader/>
>
> 4.3 Acrobat DC Classic update to version 15.006.30121
>
> > Window:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> 4.4 Acrobat Reader DC Classic update to version 15.006.30121
>
> > Window:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> 4.5 Acrobat XI update to version 11.0.15
>
> > Window:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> 4.6 Reader XI update to version 11.0.15
>
> > Window:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> 4.7 Adobe Digital Editions update to version 4.5.1
>
> > Window:
> > <https://www.adobe.com/solutions/ebook/digital-editions/download.html>
> > Macintosh:
> > <https://www.adobe.com/solutions/ebook/digital-editions/download.html>
> > iOS:
> > <https://itunes.apple.com/us/app/adobe-digital-editions/id952977781?mt=8>
> > Android:
> > <https://play.google.com/store/apps/details?id=com.adobe.digitaleditions>
>
> 4.8 These updates resolve:
>
> - a memory corruption vulnerabilities that could lead to code execution (CVE-2016-1007, CVE-2016-1009, CVE-2016-0954)
> - a vulnerability in the directory search path used to find resources that could lead to code execution (CVE-2016-1008)
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#45263c2720377c7c7c05263c27203736202630372c313c6b283c) or [[email protected]](/cdn-cgi/l/email-protection#224f5b41475056624f5b414750560c4d50450c4f5b) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates for Acrobat, Reader, and Digital Editions: <https://www.us-cert.gov/ncas/current-activity/2016/03/08/Adobe-Releases-Security-Updates-Acrobat-Reader-and-Digital-Editions>
- Security Updates Available for Adobe Acrobat and Reader: <https://helpx.adobe.com/security/products/acrobat/apsb16-09.html>
- Security update available for Adobe Digital Editions: <https://helpx.adobe.com/security/products/Digital-Editions/apsb16-06.html>
- Adobe Patches Reader and Acrobat, Teases Upcoming Flash Update: <https://threatpost.com/adobe-patches-reader-and-acrobat-teases-upcoming-flash-update/116662/#sthash.gicgh7vo.dpuf>