# MA-625.072016: MyCERT Advisory - Adobe Releases Security Updates

**Date:** 13 Jul 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-625.072016  
**Advisory ID:** MA-625.072016

---

####
**1.0 Introduction**
Adobe has released security updates to address vulnerabilities in Acrobat, Flash Player, Reader, and XMP Tookit for Java. Users and administrators are encouraged to review Adobe Security Bulletins APSB16-24, APSB16-25, and APSB16-26 and apply the necessary updates.
**2.0 Impact**
These updates address critical vulnerabilities that could potentially allow a remote attacker to take control of the affected system.
**3.0 Affected Products**
The affected products of Adobe is as listed in the Table 1:
|  |
| --- | --- | --- | **Product** | **Affected Versions** | **Platform** | Adobe XMP Tooklit for Java | 5.1.2 and earlier versions | All | Adobe Flash Player Desktop Runtime | 22.0.0.192 and earlier | Windows and Macintosh | Adobe Flash Player Extended Support Release | 18.0.0.360 and earlier | Windows and Macintosh | Adobe Flash Player for Google Chrome | 22.0.0.192 and earlier | Windows, Macintosh, Linux and ChromeOS | Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 22.0.0.192 and earlier | Windows 10 and 8.1 | Adobe Flash Player for Linux | 11.2.202.626 and earlier | Linux | Acrobat DC (Continuos) | 15.016.20045 and earlier versions | Windows and Macintosh | Acrobat Reader DC (Continuos) | 15.016.20045 and earlier versions | Windows and Macintosh | Acrobat DC (Classic) | 15.006.30174 and earlier versions | Windows and Macintosh | Acrobat Reader DC (Classic) | 15.006.30174 and earlier versions | Windows and Macintosh | Acrobat XI | 11.0.16 and earlier versions | Windows and Macintosh | Reader XI | 11.0.16 and earlier versions | Windows and Macintosh |
Table 1: Adobe Affected Product
**4.0 Recommendation**
MyCERT highly recommends users or administrators of these applications to upgrade to the latest version of the affected products:
> 4.1 Adobe XMP Toolkit for Java should update to version 5.1.3, via:
>
> - <http://www.adobe.com/devnet/xmp.html>
>
> 4.2 Adobe Flash Player Desktop Runtime for Windows and Macintosh should update to version 22.0.0.209 via:
>
> - update mechanism within the product when prompted, or
> - <http://www.adobe.com/go/getflash>
>
> 4.3 Adobe Flash Player Extended Support Release should update to version 18.0.0.366, via :
>
> - <http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
>
> 4.4 Adobe Flash Player for Google Chrome will be automatically updated to the latest Google Chrome version, which will include Adobe Flash Player 22.0.0.209 for Windows, Macintosh, Linux and Chrome OS:
>
> - <http://googlechromereleases.blogspot.com/>
>
> 4.5 Adobe Flash Player for Microsoft Edge and Internet Explorer 11 for Windows 10 and 8.1 will be automatically updated to the latest version, which will include Adobe Flash Player 22.0.0.209:
>
> - <https://technet.microsoft.com/library/security/MS16-093>
>
> 4.6 Adobe Flash Player for Linux should update to Adobe Flash Player 11.2.202.632, via :
>
> - <http://www.adobe.com/go/getflash>
>
> 4.7 Adobe Acrobat and Reader for Windows and Macintosh:
>
> - Latest product versions are available to end users:
>   - a) manually by choosing Help > Check for Updates. The products will update automatically, without requiring user intervention, when updates are detected
>   - b) full Acrobat Reader installer can be downloaded from:
>     <http://get.adobe.com/reader>
> - For IT administrators (managed environments):
>   - a) Download the enterprise installers from:
>     <ftp://ftp.adobe.com/pub/adobe/>
>   - b) Install updates via your preferred methodology, such as AIP-GPO, bootstrapper, SCUP/SCCM (Windows), or on Macintosh, Apple Remote Desktop and SSH
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#adced4cfc8df949494edced4cfc8dfdec8ced8dfc4d9d483c0d4) or [[email protected]](/cdn-cgi/l/email-protection#016c7862647375416c78626473752f6e73662f6c78) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Hand phone: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- Adobe Releases Security Updates: <https://www.us-cert.gov/ncas/current-activity/2016/07/12/Adobe-Releases-Security-Updates>
- Security Update Available for Adobe XMP toolkit for Java: <https://helpx.adobe.com/security/products/xmpcore/apsb16-24.html>
- Security Updates Available for Adobe Flash Player: <https://helpx.adobe.com/security/products/flash-player/apsb16-25.html>
- Security Advisory for Adobe Acrobat and Reader: <https://helpx.adobe.com/security/products/acrobat/apsb16-26.html>