• Skip to Content
  • Skip to Main Navigation
  • Skip to Search

Indiana University Indiana University IU

Open Search
  • Personal Preparedness
    • Keeping data safe
    • Email & phishing scams
    • IU passphrases
    • Using social media
    • Web privacy
    • File sharing & copyright
      • Contesting copyright infringement notices
      • Disabling peer-to-peer file sharing
      • Copyright tutorial
      • Copyright infringement incident resolution
    • Account privileges
    • Vulnerability Disclosure Guidance
    • Secure data removal
    • Remote Desktop
    • Hardware & software security
      • Laptop & mobile device security
      • Malware, scareware, & ransomware
      • Storage drives
      • Wearable technologies
      • Protecting data in copiers and multifunction devices
      • Use of survey software
      • Solid State Drives
    • Cybersecurity while traveling
    • Identity verification
  • Information & IT Policies
    • The Policy Hierarchy explained
    • Privacy policies & FAQ
    • Acceptable Use Agreement
    • Information & IT Policy Process
    • Cyber Risk Review
    • Federal & international regulations
    • Indiana Data Protection laws FAQ
    • IT-12.1 Mobile Device Security Standard
  • Information Security & Privacy Program
    • Safeguards
      • Risk assessment and treatment
      • Policy administration
      • Organization
      • Asset management
      • Human resources
      • Physical & environmental security
      • Communications & operations management
      • Identity & access control
      • Information systems acquisition, development, and maintenance
      • Incident management
      • Business continuity management
      • Compliance
    • Governance
    • Principles
  • Protecting Data
    • Privacy matters
      • Privacy harms
      • Privacy principles
      • Understanding and protecting privacy
    • Sensitive data
      • Guidelines
    • Sharing institutional data with third parties
  • Resources for IT Professionals
    • Information Risk Assessments
    • SecureMyResearch
    • Cloud computing
    • Audits & requirements
    • Data encryption
    • Back up data
    • Information security best practices
    • CIS Secure Suite
    • Disaster recovery planning
    • Managing employee data
    • Medical device security
    • Transferring data securely
    • Using SSH
    • Additional resources
      • Privacy Notice Generator
      • Training & awareness
      • Incident Response Webservice
      • Penetration test
      • SSL/TLS certificates
      • Vulnerability scanners
  • About
    • Glossary of Terms
    • Trustees Resolution
  • Contact
  • Report an Incident
    • Report Privacy Incident or Request Assistance
    • Emergency IT Incidents
    • Managing Incidents
    • Identity Theft
    • Reporting Suspected Sensitive Data Exposures

Information Security & Policy

  • Home
  • Personal Preparedness
    • Keeping data safe
    • Email & phishing scams
    • IU passphrases
    • Using social media
    • Web privacy
    • File sharing & copyright
    • Account privileges
    • Vulnerability Disclosure Guidance
    • Secure data removal
    • Remote Desktop
    • Hardware & software security
    • Cybersecurity while traveling
    • Identity verification
  • Information & IT Policies
    • The Policy Hierarchy explained
    • Privacy policies & FAQ
    • Acceptable Use Agreement
    • Information & IT Policy Process
    • Cyber Risk Review
    • Federal & international regulations
    • Indiana Data Protection laws FAQ
    • IT-12.1 Mobile Device Security Standard
  • Information Security & Privacy Program
    • Safeguards
    • Governance
    • Principles
  • Protecting Data
    • Privacy matters
    • Sensitive data
    • Sharing institutional data with third parties
  • Resources for IT Professionals
    • Information Risk Assessments
    • SecureMyResearch
    • Cloud computing
    • Audits & requirements
    • Data encryption
    • Back up data
    • Information security best practices
    • CIS Secure Suite
    • Disaster recovery planning
    • Managing employee data
    • Medical device security
    • Transferring data securely
    • Using SSH
    • Additional resources
  • Search
  • About
  • Contact
  • Report an Incident
  • Home
  • Security Bulletins
  • Zero-Day Adobe Flash Player Vulnerabilities - Updated

Zero-Day Adobe Flash Player Vulnerabilities - Updated

Wednesday, July 08, 2015

Background

Recently, awareness of zero-day vulnerabilities for Adobe Flash Player surfaced.

Impact

Sources indicate that at least one vulnerability is actively being exploited in the wild. Successful exploitation of either vulnerability can result in remote code execution.

Platforms Affected

Adobe states that all previously released versions (18.0.0.204 and older) of Adobe Flash are affected, including those bundled with Adobe AIR.

Mitigation

Immediately update Adobe Flash Player to 18.0.0.209 (Win and Mac); and 11.2.202.481 (Linux).

Immediately update AIR Desktop Runtime to 18.0.0.180.

More version information can be found here.

Note: Windows devices which are configured to use IU's Microsoft Update Service will automatically receive updates relating to this vulnerability.

After a reasonable amount of time, users who continue to run vulnerable versions of Flash or AIR will be directly notified via email.

UISO Recommendations

To help mitigate potential future threats, enable Click-to-Play for the Adobe Flash Player add-on.

Further Reading

  • Adobe's Player Download Center site on adobe.com
  • Helpful hints for managing the Adobe Flash add-on on macromedia.com
  • Enabling 'Click-to-Play' for the Adobe Flash Player add-on on howtogeek.com

Information Security & Policy resources

  • Leading in Cybersecurity
  • IU Data Management

Indiana University

Accessibility | Privacy Notice | Copyright © 2021 The Trustees of Indiana University