Adobe Flash Player and AIR Security Update

[Corrine]

Adobe has released Version 28.0.0.126 of Adobe Flash Player and Version 28.0.0.127 of Adobe AIR. The update addresses CVE-2017-11305, a regression that could lead to the unintended reset of the global settings preference file.

Release date: December 12, 2017
Vulnerability identifier: APSB17-42
Platform: Windows, Macintosh, Linux and Chrome OS

Update:

• With the option to 'Allow Adobe to install updates', the update will be automatic. Without that setting enabled, either install the update via the update mechanism when prompted or via the Download Center*.
• Windows 7 and earlier: Installation links for Windows 7 and earlier are provided by Adobe at Installation problems | Flash Player | Windows 7 and earlier:
  • Flash Player for Internet Explorer - ActiveX
  • Flash Player for Firefox/Pale Moon - NPAPI
  • Flash Player for Opera and Chromium-based browsers - PPAPI
• Microsoft Edge and Internet Explorer 11: Adobe Flash Player will be automatically updated to the latest version for Windows 8.1 and 10.
• Google Chrome: Adobe Flash Player will be automatically updated to the latest Google Chrome version.
• Flash Player Uninstaller: http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe
• Adobe AIR: Adobe - Adobe AIR

*Important Note: Downloading the update from the Adobe Flash Player Download Center link includes a pre-checked option to install unnecessary extras, such as McAfee Scan Plus or Google Drive. If you use the download center, uncheck any unnecessary extras that you do not want. They are not needed for the Flash Player update.

• Release Notes: Flash Player® 28 AIR® 28
• Security Bulletin