Note:

This issue was addressed on October 4, 2012. More details are available in this security advisory.

Adobe investigated what appeared to be the inappropriate use of an Adobe code signing certificate for Windows. We revoked the impacted certificate on October 4 2012 for all software code signed after July 10 2012. Customers should not notice anything out of the ordinary during the certificate revocation process.

Is your Adobe software vulnerable because of this issue? No. This issue has no impact on the security of your genuine Adobe software. Are there other security risks to you? We have strong reason to believe that this issue does not present a general security risk.

The revocation of the certificate affects the Windows platform and three Adobe AIR applications* that run on both Windows and Mac OS. The revocation does not impact any other Adobe software for Mac OS or other platforms.

Adobe issued updates for all impacted products to provide customers with software code signed using a new digital certificate.

For more information, read the FAQ or ask a question.

Do I need to update my software?

If you haven't installed Adobe software or updates after July 10 2012, you don't need to do anything.

If you use Adobe software on Windows,* click any of the following links to find out whether you need to update your software:

I use Flash Player.

I use Acrobat or Adobe Reader.

I use other Adobe desktop products.

I use Adobe enterprise products.

I manage Adobe applications as an IT administrator.

I use Flash Player.

Go to the Flash Player Help page and make sure that you have the latest version.

I use Acrobat or Adobe Reader.

You don't need to do anything, but we encourage all end users to keep their software up to date. Download the latest version.

I use other Adobe desktop products.

If you use Adobe software on Windows,* simply follow these guidelines.

Note: These updates typically take minutes to install—they're not full products.

I use Adobe enterprise products.

Contact your IT administrator. If you are the administrator, check the list of enterprise products with updates, and then see Guidance for IT administrators.

I manage Adobe applications as an IT administrator.

Desktop products with updates

The table below lists products with updated security certificates. If your product isn't listed here, you don't need to do anything.

To get updated certificates, choose from one of these options:

  • For CS6 and Creative Cloud Choose Help > Update in your software. If you're a Creative Cloud subscriber, you get updates that contain product features not available in regular product updates on Adobe.com.
  • Use the Adobe Customer Response Tool for Windows Download and install the Adobe Customer Response Tool for Windows. The tool determines which products have updated certificates and gives you links to install them (not available for Creative Cloud). If you're a system administrator, download and install the enterprise version.
  • Download updates from Adobe.com If you want to update products on your own, use the list below.
Products with updated certificates (Windows only unless otherwise noted.)
Click the link to get the update.
Photoshop CS6
Flash Player
Acrobat.com services for Windows and Mac OS
SendNow desktop AIR application
Adobe Application Manager
Audition CS6
Adobe Bridge:  64 bit  |  32 bit
ColdFusion 10** (Windows, Mac OS, and Linux)
Adobe recommends that all ColdFusion 10 users install the update.
Configurator 3.1 (Labs)
Contribute 6.5
Contact support to request a replacement DVD free of charge.
Creative Suite Cleaner Tool
Digital Publishing Suite - install these updates if you have R22 or R23 installed: 
DPS Desktop Tools for InDesign CS6
Folio Builder panel for InDesign CS5.5, CS5.0
Folio Producer tools for InDesign CS5.5, CS5.0
Dreamweaver CS6 - required only for release 12.0.1 (ZIP)
If you're a Creative Cloud subscriber, choose Help > Update in your software.
Drive 4
Encore CS6
Adobe Extension Manager CS6 (ZIP)
Flash Media Server:  Win (EXE)  |  UNIX (TAR)
Flash Professional CS6 (ZIP)
Flash Professional CS6 / Toolkit for CreateJS
Illustrator CS6 - required only for releases 16.0.0 & 16.0.1.  64-bit  |  32-bit
If you're a Creative Cloud subscriber, choose Help > Update in your software.
Adobe Media Encoder CS6:  64-bit  |  32-bit
Adobe Muse: Launch Muse to get the update.
Adobe Premiere Pro CS6
Prelude CS6
Presenter 8
Or, launch Presenter and choose Help > Update.**
Shockwave Player
SpeedGrade CS6
Adobe Story desktop application for Windows and Mac OS: Launch the desktop application to get the update.

** Presenter 8 and ColdFusion 10 customers can either download the update, or contact support to request a new DVD free of charge.

Enterprise products with updates

You can find updates for desktop products in the table above, or download and install the Adobe Customer Response Tool for Windows. The tool determines which products have updated certificates and gives you links to install them. (Not available for Creative Cloud.) You can also find updates on the Licensing Website (LWS).

For Digital Marketing product updates, go to your Digital Marketing account.

See Guidance for IT administrators for instructions on updating the following enterprise products:

  • Adobe Application Manager - Enterprise Edition (AAMEE)
  • Adobe Update Server Setup Tool (AUSST)
  • Remote Update Manager (RUM)
  • Flash Player and Reader
  • Flash Media Server 4.5.3
  • ColdFusion 10
  • Report Builder - Digital Marketing Suite
  • SiteCatalyst Real-Time Dashboard - Digital Marketing Suite
  • Adobe Provisioning Toolkit Enterprise Edition (APTEE)

* Adobe Muse and Adobe Story AIR applications as well as Acrobat.com desktop services

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy