Windows/Mac/Linux: Adobe Flash Player Security Updates APSB14-17

SUMMARY: Windows/Mac/Linux: Adobe Flash Player Security Updates APSB14-17
POSTED ON: 07/08/2014
REPORTER: Jocelyn E Kasamoto (jocelyn)
START TIME: Jul 08 02:34 PM
END TIME: Aug 11 02:34 PM
DESCRIPTION: Adobe released security updates (APSB14-17) today, July 8, 2014, for Adobe Flash Player which fixes three critical vulnerabilities (CVE-2014-4671, CVE-2014-0537, CVE-2014-0539), rated "priority 1" (higher risk of being used in targeted exploits), which made it possible for hackers to steal cookies that authenticate returning users on sites like Instagram, eBay, Tumblr and other websites [2]. A proof-of-concept tool called Rosetta Flash has been released.

The Flash Player security updates are for Windows, OS X and Linux users. For Windows/OS X, the current version is now 14.0.0.145 and for Linux 11.2.202.394. Google Chrome users need to update Google Chrome to fix the included version of Flash as do users of Internet Explorer 10 and 11. [3]

Please update your Adobe Flash Player to the recommended version as soon as possible.

Affected Software ==> Recommended Flash Player Update

Adobe Flash Player 14.0.0.125 and earlier (Windows, Mac) ==> Flash Player 14.0.0.145
Adobe Flash Player 11.2.202.378 and earlier (Linux) ==> Flash Player 11.2.202.394

Flash Player installed with Google Chrome will automatically be updated to the latest Google Chrome version, which will include Adobe Flash Player 14.0.0.145 for Windows and Mac (11.2.202.394 for Linux).

Flash Player installed with Internet Explorer 10/11 will automatically be updated to the latest Internet Explorer 10/11 version, which will include Adobe Flash Player 14.0.0.145 for Windows 8.0/8.1.

Which Version of Adobe Flash Player am I running?
http://www.adobe.com/products/flash/about/

To Install Adobe Flash Player Update (Firefox):
1. Close all applications.
2. Ensure that you are logged in with an administrator account.
3. You may need to temporarily disable your anti-virus program.
4. Open your web browser to http://get.adobe.com/flashplayer/
5. UNCHECK "Free McAfee Security Scan Plus", "Free Google Toolbar" or "Google Chrome".
6. Click "Install Now" button.
7. Save file to your hard drive. Double click on file to run it.
8. Check "I have read and agree to the terms of the Flash Player License Agreement."
9. Click Install button.
10. Follow instructions on the screen.
11. Note: set Adobe Flash Player update options to either "allow Adobe to install updates (recommended)" or "notify me to install updates". Click Next.
12. When the installation is complete, open web browser to http://www.adobe.com/products/flash/about/ to confirm the version of Adobe Flash Player that you are running. You may need to restart your browser.

Note: you must update Adobe Flash Player for each web browser that is installed on your system, eg Firefox, Internet Explorer, Safari, Chrome, etc.

Beginning May 13, 2014, Adobe Flash Player 13 for Mac and Windows will replace version 11.7 as the extended support version. Adobe recommends that users upgrade to version 13 to continue to receive security updates.
http://blogs.adobe.com/flashplayer/2014/03/upcoming-changes-to-flash-players-extended-support-release.html

Note: Flash Player 14 released on June 10, 2014 is the current version of Flash Player.
https://forums.adobe.com/thread/1493673

For More Information

[1] http://helpx.adobe.com/security/products/flash-player/apsb14-17.html
[2] http://arstechnica.com/security/2014/07/weaponized-exploit-can-steal-user-cookies-on-ebay-tumblr-other-sites/
[3] http://technet.microsoft.com/en-us/security/advisory/2755801

If you have questions or need assistance, please contact the ITS Help Desk at 956-8883, email help@hawaii.edu or call (800) 558-2669 toll free from the neighbor islands.