Security Alert (A17-07-04): Multiple Vulnerabilities in Adobe Flash Player

Description:

Security updates are released for Adobe Flash Player to address multiple vulnerabilities caused by memory corruption and security bypass. To successfully exploit the vulnerabilities, a remote attacker could entice a targeted user to open a specially crafted Flash file, web page or document that supports embedded Flash content. 

Affected Systems:

• Adobe Flash Player Desktop Runtime for Windows, Macintosh and Linux 26.0.0.131 and earlier versions
• Adobe Flash Player for Google Chrome 26.0.0.131 and earlier versions
• Adobe Flash Player for Microsoft Edge and Internet Explorer 11 26.0.0.120 and earlier versions

Impact:

A successful exploitation could lead to memory address disclosure, information disclosure, arbitrary code execution or potentially take control of the affected system.

Recommendation:

Upgrade Adobe Flash Player to the following versions to address the issues. The upgrade can be obtained by using the auto-update mechanism or by downloading at the following URLs:

• Adobe Flash Player Desktop Runtime 26.0.0.137 for Windows and Macintosh
  https://get.adobe.com/flashplayer/
  http://www.adobe.com/products/players/flash-player-distribution.html
  
  
• Adobe Flash Player 26.0.0.137 for Google Chrome
  https://chromereleases.googleblog.com/
  
  
• Adobe Flash Player 26.0.0.137 for Microsoft Edge and Internet Explorer 11
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170009
  
  
• Adobe Flash Player 26.0.0.137 for Linux
  https://get.adobe.com/flashplayer/
  
  

If you have multiple browsers, you are required to perform the Adobe Flash Player upgrade for each browser, the Flash Player version can be checked at

http://get.adobe.com/flashplayer/about/