Security Updates to Address Vulnerabilities in Multiple Adobe Products
Date: 9 January 2013
The purpose of this advisory is to bring attention to recently released security updates for Adobe Acrobat, Reader and Flash Player.
Adobe has released Security Bulletin APSB13-01 and APSB13-02 to address critical vulnerabilities that could cause a system crash and potentially allow an attacker to take control of the affected system.
CVE References: CVE-2013-0630, CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616, CVE-2013-0617, CVE-2013-0618, CVE-2013-0619, CVE-2013-0620, CVE-2013-0621, CVE-2013-0622, CVE-2013-0623, CVE-2013-0624, CVE-2013-0626, CVE-2013-0627
- Adobe Flash Player 11.5.502.135 and earlier versions for Windows
- Adobe Flash Player 11.5.502.136 and earlier versions for Macintosh
- Adobe Flash Player 18.104.22.1688 and earlier versions for Linux
- Adobe Flash Player 22.214.171.124 and earlier versions for Android 4.x
- Adobe Flash Player 126.96.36.199 and earlier versions for Android 3.x and 2.x
- Adobe AIR 188.8.131.520 and earlier versions for Windows,
- Adobe AIR 184.108.40.2060 and earlier versions for Macintosh
- Adobe AIR 220.127.116.110 for Android
- Adobe AIR 18.104.22.1680 SDK and Adobe AIR 22.214.171.1240 SDK
- Adobe Reader XI (11.0.0) for Windows and Macintosh
- Adobe Reader X (10.1.4) and earlier 10.x versions for Windows and Macintosh
- Adobe Reader 9.5.2 and earlier 9.x versions for Windows and Macintosh
- Adobe Reader 9.5.1 and earlier 9.x versions for Linux
- Adobe Acrobat XI (11.0.0) for Windows and Macintosh
- Adobe Acrobat X (10.1.4) and earlier 10.x versions for Windows and Macintosh
- Adobe Acrobat 9.5.2 and earlier 9.x versions for Windows and Macintosh
CCIRC recommends that system administrators test and deploy the vendor-released updates to the affected applications.
Note to Readers
In support of Public Safety's mission to build a safe and resilient Canada, CCIRC's mandate is to help ensure the security and resilience of the vital non-federal government cyber systems that underpin Canada's national security, public safety and economic prosperity. As Canada's computer security incident response team, CCIRC is Canada's national coordination centre for the prevention and mitigation of, preparedness for, response to, and recovery from cyber incidents on non-federal government systems. It does this by providing authoritative advice and support, and coordinating information sharing and incident response.
Please note, CCIRC PGP key has recently been updated.
For general information, please contact Public Safety Canada's Public Affairs division at:
Telephone: 613-944-4875 or 1-800-830-3118
- Date modified: