# MA-617.062016: MyCERT Advisory - Adobe Releases Security Updates

**Date:** 15 Jun 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-617.062016  
**Advisory ID:** MA-617.062016

---

####
**1.0 Introduction**
Adobe has released security updates to address vulnerabilities in DNG Software Development Kit (SDK), Brackets, Creative Cloud Desktop Application and Cold Fusion.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
- Adobe DNG Software Development Kit (SDK) 1.4 (2012 release) and earlier (Windows and Mac)
- Adobe Brackets 1.6 and earlier (Windows, Mac, Linux)
- Creative Cloud Desktop Application 3.6.0.248 and earlier (Windows)
- ColdFusion (2016 release) Update 1
- ColdFusion 11 Update 8 and earlier
- ColdFusion 10 Update 19 and earlier
**4.0 Recommendation**
Adobe recommends users update their product installations to the latest versions:
- Users of Adobe DNG Software Development Kit (SDK) for Windows and Macintosh should update to updated version 1.6 (2016 release) available at the below URL: <https://www.adobe.com/support/downloads/dng/dng_sdk.html>
- Users of Adobe Brackets for Windows, Mac and Linux should update to version 1.7 available at the below URL: <https://github.com/adobe/brackets/releases>
- Users of Creative Cloud Desktop Application for Windows should update to version 3.7.0.272 available at the below URL: <https://www.adobe.com/creativecloud/desktop-app.html>
- Users of ColdFusion should update their application using the instructions provided at the below URL:
- ColdFusion (2016 release): <http://helpx.adobe.com/coldfusion/kb/coldfusion-2016-update-2.html>
- ColdFusion 11: <http://helpx.adobe.com/coldfusion/kb/coldfusion-11-update-9.html>
- ColdFusion 10:  <http://helpx.adobe.com/coldfusion/kb/coldfusion-10-update-20.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#5d3e243f382f6464641d3e243f382f2e383e282f342924733024) or [[email protected]](/cdn-cgi/l/email-protection#fa9783999f888eba9783999f888ed495889dd49783) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2016/06/14/Adobe-Releases-Security-Updates>
- <https://helpx.adobe.com/security/products/dng-sdk/apsb16-19.html>
- <https://helpx.adobe.com/security/products/brackets/apsb16-20.html>
- <https://helpx.adobe.com/security/products/creative-cloud/apsb16-21.html>
- <https://helpx.adobe.com/security/products/coldfusion/apsb16-22.html>