# MA-636.092016: MyCERT Advisory - Adobe Releases Security Updates

**Date:** 14 Sep 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-636.092016  
**Advisory ID:** MA-636.092016

---

**1.0 Introduction**
Adobe has released security updates to address vulnerabilities in Digital Editions, Flash Player, and Air SKD & Compiler software.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
- Digital Editions 4.5.1 and earlier versions (Windows, Mac, iOS and Android)
- Adobe Flash Player Desktop Runtime 22.0.0.211 and earlier (Windows and Mac)
- Adobe Flash Player Extended Support Release 18.0.0.366 and earlier (Windows and Mac)
- Adobe Flash Player for Google Chrome 22.0.0.211 and earlier (Windows, Mac, Linux and ChromeOS)
- Adobe Flash Player for Microsoft Edge and Internet Explorer 11 22.0.0.211 and earlier (Windows 10 and 8.1)
- Adobe Flash Player for Linux 11.2.202.632 and earlier (Linux)
- Adobe AIR SDK and Compiler 22.0.0.153 and earlier (Windows and Mac)
**4.0 Recommendation**
Users and administrators are encouraged to review Adobe Security Bulletins and apply necessary updates:
- Digital Editions 4.5.2:
- Windows - <https://www.adobe.com/solutions/ebook/digital-editions/download.html>
- Mac - <https://www.adobe.com/solutions/ebook/digital-editions/download.html>
- iOS - <https://itunes.apple.com/us/app/adobe-digital-editions/id952977781?mt=8>
- Android - <https://play.google.com/store/apps/details?id=com.adobe.digitaleditions>
- Adobe Flash Player Desktop Runtime 22.0.0.211 and earlier (Windows and Mac)
- Download: <http://www.adobe.com/go/getflash>
- Adobe Flash Player Extended Support Release 18.0.0.366 and earlier (Windows and Mac)
- Download: <http://helpx.adobe.com/flash-player/kb/archived-flash-player-versions.html>
- Adobe Flash Player for Google Chrome 22.0.0.211 and earlier (Windows, Mac, Linux and ChromeOS)
- Download: <http://googlechromereleases.blogspot.com/>
- Adobe Flash Player for Microsoft Edge and Internet Explorer 11 22.0.0.211 and earlier (Windows 10 and 8.1)
- Download: <https://technet.microsoft.com/library/security/MS16-117>
- Adobe Flash Player for Linux 11.2.202.632 and earlier (Linux)
- Download: <http://www.adobe.com/go/getflash>
- Adobe AIR SDK and Compiler 22.0.0.153 and earlier (Windows and Mac)
- Download: <https://www.adobe.com/devnet/air/air-sdk-download.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#3d5e445f584f0404047d5e445f584f4e585e484f544944135044) or [[email protected]](/cdn-cgi/l/email-protection#05687c6660777145687c666077712b6a77622b687c) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0References**
- <https://www.us-cert.gov/ncas/current-activity/2016/09/13/Adobe-Releases-Security-Updates>
- <https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html>
- <https://helpx.adobe.com/security/products/flash-player/apsb16-29.html>
- <https://helpx.adobe.com/security/products/air/apsb16-31.html>