Release date: May 23, 2016
Last updated: June 3, 2016
Vulnerability identifier: APSB16-17
CVE number: CVE-2016-4118
Adobe has released a security update for the Adobe Connect Add-In for Windows. This update resolves an untrusted search path vulnerability in the Connect Add-In installer, and Adobe recommends users update their product installation using the instructions provided in the “Solution” Section below.
Adobe recommends customers update the Connect Add-In to the newest version by following the instructions below.
Note: This issue will be automatically resolved for Hosted Connect customers once the account is upgraded to Connect 9.5.3.
Adobe would like to thank Anand Bhat for reporting this issue (CVE-2016-4118) and for working with Adobe to help protect our customers.