# MA-604.052016: MyCERT Advisory - Adobe Releases Security Updates

**Date:** 11 May 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-604.052016  
**Advisory ID:** MA-604.052016

---

####
**1.0 Introduction**
Adobe has released security updates to address vulnerabilities in Flash Player, ColdFusion, Acrobat, and Reader. Users and administrators are encouraged to review Adobe Security Bulletins APSA16-02, APSB16-14, and APSB16-16 and apply the necessary updates.
**2.0 Impact**
These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.
**3.0 Affected Products**
The affected products of Adobe is as listed in the Table 1:
|  |
| --- | --- | --- | **Product** | **Affected Versions** | **Platform** | Adobe Flash Player | 21.0.0.226 and earlier versions | Windows, Macintosh, Linux, and Chrome OS | Acrobat DC (Continuous) | 15.010.20060 and earlier versions | Windows and Macintosh | Acrobat Reader DC (Continuous) | 15.010.20060 and earlier versions | Windows and Macintosh | Acrobat DC (Classic) | 15.006.30121 and earlier versions | Windows and Macintosh | Acrobat Reader DC (Classic) | 15.006.30121 and earlier versions | Windows and Macintosh | Acrobat XI | 11.0.15 and earlier versions | Windows and Macintosh | Reader XI | 11.0.15 and earlier versions | Windows and Macintosh | ColdFusion (2016 release) | 2016.0.0 | All | ColdFusion 11 | Update 7 and earlier versions | All | ColdFusion 10 | Update 18 and earlier versions | All |
Table 1: Adobe Affected Product
**4.0 Recommendation**
MyCERT highly recommends users or administrators of these applications to upgrade to the latest version of the affected products:
> 4.1 Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Adobe will address this vulnerability in monthly security update, which will be available as early as May 12. For the latest information, users may monitor the Adobe Product Security Incident Response Team blog:
> <http://blogs.adobe.com/psirt/>
>
> 4.2 Adobe Acrobat
>
> - Acrobat DC (Continuous)
>
> > Windows:
> > [http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows](http://www.adobe.com/support/downloads/product.jsp?product=1&pla%09tform=Windows)
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> - Acrobat Reader DC (Continuous)
>
> > Download Center:
> > <https://get.adobe.com/reader/>
>
> - Acrobat DC (Classic)
>
> > Windows:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> - Acrobat Reader DC (Classic)
>
> > Windows:
> > <http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Mac>
>
> - Acrobat XI
>
> > Windows:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Mac>
>
> - Reader XI
>
> > Windows:
> > <http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows>
> > Macintosh:
> > <http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows>
>
> 4.3 Adobe Cold Fusion:
>
> - ColdFusion (2016 release): <http://helpx.adobe.com/coldfusion/kb/coldfusion-2016-update-1.html>
> - ColdFusion 11: <http://helpx.adobe.com/coldfusion/kb/coldfusion-11-update-8.html>
> - ColdFusion 10: <http://helpx.adobe.com/coldfusion/kb/coldfusion-10-update-19.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#9ffce6fdfaeda6a6a6dffce6fdfaedecfafceaedf6ebe6b1f2e6) or [[email protected]](/cdn-cgi/l/email-protection#305d4953554244705d49535542441e5f42571e5d49) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Hand phone: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates:
<https://www.us-cert.gov/ncas/current-activity/2016/05/10/Adobe-Releases-Security-Updates>
- Security Update: Hot fixes available for ColdFusion
<https://helpx.adobe.com/security/products/coldfusion/apsb16-16.html>
- Security Updates Available for Adobe Acrobat and Reader
<https://helpx.adobe.com/security/products/acrobat/apsb16-14.html>
- Security Advisory for Adobe Flash Player
<https://helpx.adobe.com/security/products/flash-player/apsa16-02.html>