# MA-592.042016: MyCERT Advisory - Adobe Releases Security Updates for Flash Player

**Date:** 08 Apr 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-592.042016  
**Advisory ID:** MA-592.042016

---

####
**1.0 Introduction**
Adobe has released security updates to address multiple vulnerabilities in Flash Player. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
|  |
| --- | --- | --- | Product | Affected Versions | Platform | Adobe Flash Player Desktop Runtime | 21.0.0.197 and earlier | Windows and Macintosh | Adobe Flash Player Extended Support Release | 18.0.0.333 and earlier | Windows and Macintosh | Adobe Flash Player for Google Chrome | 21.0.0.197 and earlier | Windows, Macintosh, Linux and ChromeOS | Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 21.0.0.197 and earlier | Windows 10 | Adobe Flash Player for Internet Explorer 11 | 21.0.0.207 and earlier | Windows 8.1 | Adobe Flash Player for Linux | 11.2.202.577 and earlier | Linux | AIR Desktop Runtime | 21.0.0.176 and earlier | Windows and Macintosh | AIR SDK | 21.0.0.176 and earlier | Windows, Macintosh, Android and iOS | AIR SDK & Compiler | 21.0.0.176 and earlier | Windows, Macintosh, Android and iOS |
**4.0 Recommendation**
Adobe recommends users to update their software to the latest version by following these instructions below:
- Flash Player Desktop Runtime of earlier versions should update to 21.0.0.213 via this URL:
<http://www.adobe.com/go/getflash>
- Flash Player Extended Support Release 18.0.0.343 via this URL:
<http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
- Flash Player for Google Chrome
<http://googlechromereleases.blogspot.com/>
- Flash Player for Microsoft Edge and Internet Explorer 11 via this URL:
<http://go.microsoft.com/fwlink/?LinkId=264959>
- Flash Player 11.2.202.616 for Linux via this URL:
<http://www.adobe.com/go/getflash>
- AIR Desktop Runtime 21.0.0.198 for Windows, Macintosh, Android and iOS via this URL:
<http://get.adobe.com/air/>
- AIR SDK21.0.0.198 for Windows, Macintosh, Android and iOS via this URL:
<http://www.adobe.com/devnet/air/air-sdk-download.html>
- AIR SDK and Compiler 21.0.0.198 for Windows, Macintosh, Android and iOS via this URL: <http://www.adobe.com/devnet/air/air-sdk-download.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#e7849e858295dededea7849e85829594828492958e939ec98a9e) or [[email protected]](/cdn-cgi/l/email-protection#4c21352f293e380c21352f293e3862233e2b622135) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- US-CERT: Adobe Releases Security Updates for Flash Player, <https://www.us-cert.gov/ncas/current-activity/2016/04/08/Adobe-Releases-Updates-Flash-Player>
- Adobe Security Bulletin: Security updates available for Adobe Flash Player, <https://helpx.adobe.com/security/products/flash-player/apsb16-10.html>