# MA-609.052016: MyCERT Advisory - Adobe Releases Security Updates for Adobe Connect

**Date:** 24 May 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-609.052016  
**Advisory ID:** MA-609.052016

---

####
**1.0 Introduction**
Adobe has released a security update to address a vulnerability in Adobe Connect for Windows. Users and administrators are encouraged to review the Adobe Security Bulletin APSB16-17 and apply the necessary update. This update resolves an untrusted search path vulnerability in the Connect add-in installer (CVE-2016-4118).
**2.0 Impact**
These updates address vulnerabilities that could potentially allow a remote attacker to take control of the affected system.
**3.0 Affected Products**
The affected products of Adobe is as listed below:
|  |
| --- | --- | --- | **Product** | **Affected Versions** | **Platform** | Adobe Connect | 9.5.2 and earlier versions | Windows |
**4.0 Recommendation**
MyCERT highly recommends users or administrators of these applications to upgrade to the latest version of the affected products:
> 4.1 Adobe Connect version 9.5.3
> Please refer, the release notes:
> <https://helpx.adobe.com/adobe-connect/release-note/adobe-connect-9-5-3-release-notes.html>
>
> Notes:
> The Adobe Connect 9.5.3 installer for customer on-premise deployments (all supported locales) will be available starting on May 20th, 2016. For more details on new features in Connect 9.5.3, please refer to the release notes.
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#98fbe1fafdeaa1a1a1d8fbe1fafdeaebfdfbedeaf1ece1b6f5e1) or [[email protected]](/cdn-cgi/l/email-protection#6904100a0c1b1d2904100a0c1b1d47061b0e470410) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Hand phone: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Update for Adobe Connect:
<https://www.us-cert.gov/ncas/current-activity/2016/05/23/Adobe-Releases-Security-Update-Adobe-Connect>
- Adobe Security Bulletin:
<https://helpx.adobe.com/security/products/connect/apsb16-17.html>
- Adobe Product Security Incident Response Team (PSIRT) Blog:
<https://blogs.adobe.com/psirt/?cat=3>