-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Reference: CERT-EU Security Advisory 2014-012

Title: Security updates available for Adobe Flash Player

Version history:
13.02.2014 Initial publication

Summary
=======

Adobe has released security updates for Adobe Flash Player 12.0.0.43 and earlier versions for Windows and Macintosh and Adobe Flash Player 11.2.202.335 and earlier versions for Linux. These updates address a critical vulnerability that could potentially allow an attacker to remotely take control of the affected system.

Adobe is aware of reports that an exploit for this vulnerability exists in the wild, and recommends users update their product installations to the latest versions:

- - Users of Adobe Flash Player 12.0.0.43 and earlier versions for Windows and Macintosh should update to Adobe Flash Player 12.0.0.44.
- - Users of Adobe Flash Player 11.2.202.335 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.336.
- - Adobe Flash Player 12.0.0.41 installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 12.0.0.44 for Windows, Macintosh and Linux.
- - Adobe Flash Player 12.0.0.38 installed with Internet Explorer 10 will automatically be updated to the latest Internet Explorer 10 version, which will include Adobe Flash Player 12.0.0.44 for Windows 8.0.
- - Adobe Flash Player 12.0.0.38 installed with Internet Explorer 11 will automatically be updated to the latest Internet Explorer 11 version, which will include Adobe Flash Player 12.0.0.44 for Windows 8.1.

CVE number: CVE-2014-0497

Vulnerable systems
==================

Adobe Flash Player 12.0.0.43 and earlier versions for Windows and Macintosh
Adobe Flash Player 11.2.202.335 and earlier versions for Linux


What can you do?
================

Adobe recommends users update their product installations to the latest versions. See for further details [1]:

- - Users of Adobe Flash Player 12.0.0.43 and earlier versions for Windows and Macintosh should update to Adobe Flash Player 12.0.0.44.
- - Users of Adobe Flash Player 11.2.202.335 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.336.
- - Adobe Flash Player 12.0.0.41 installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 12.0.0.44 for Windows, Macintosh and Linux.
- - Adobe Flash Player 12.0.0.38 installed with Internet Explorer 10 will automatically be updated to the latest Internet Explorer 10 version, which will include Adobe Flash Player 12.0.0.44 for Windows 8.0.
- - Adobe Flash Player 12.0.0.38 installed with Internet Explorer 11 will automatically be updated to the latest Internet Explorer 11 version, which will include Adobe Flash Player 12.0.0.44 for Windows 8.1.


More information
================

[1] http://helpx.adobe.com/security/products/flash-player/apsb14-04.html



Best regards,

CERT-EU Pre-configuration Team (http://cert.europa.eu)
Phone: +32.2.2990005 / e-mail: cert-eu@ec.europa.eu
PGP KeyID 0x46AC4383
FP: 9011 6BE9 D642 DD93 8348 DAFA 27A4 06CA 46AC 4383
Privacy Statement:
http://cert.europa.eu/cert/plainedition/en/cert_privacy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJS/NVFAAoJEPpzpNLI8SVomp4P/3PbiND73dNGM3UtyQr/P3bA
4llZedqe0lARLK4q6d+MdqLuKUaZxF55cg+w/C7ea9l0g5gsgcouYOoSUMpcJ0+h
OBOh/wA4i6Hj8ip9eqvyw2ykLnVZGpo09bBXfyRh+rDU4ySGzstxzk1riLn5JE3Z
j1TKZQrnfcHtpiXojdzoE+xuEv1cisWEazPHSu1ZNpJp/bSOxzE87To24UoBsmOU
MicptBYrJ+/Bb3nKIClzaPbtEl6G4Mnv9uo4Zd1APr52EbNLueyHy7/xCfX3GWUh
YWqbIvMAzLhF+X6LG+2bmksYaLWmwDZhXzfuoD5OtisZhT50sMtRoi2ErBV410No
RwnxlxQg4Lu5nozo2yDecvlCnX6Ij1DmnWlZSEkv3sDwAjXhB6y69cIJ1pbD7vjD
yZffAEyImMZgGNWubWps/JPMpMZQukfabY3foYi9gIpMbSfixn4YnZM+1lRLIuAu
WQ7o5N5Zp4Stu+HcoAKUkabOkWmcnKKoPSbFXFVNkXkcXv39VRMxPqrx7fSp7J0t
cf0MPYoGurIYEgv8Cyc6w0jA6HIXEh5HI27XamqReYnhEUaTYCvTrRfcpcUzoLYS
oV89aIgd5y4fbNEHCGNVtsyQicNzEY269aTBdVQWi3jmun/7LzDoCCWwRPXu49MN
EGfIk1vTtxa/AThUOrAK
=GS3r
-----END PGP SIGNATURE-----