Tell me please is Flash.ocx version 11.3.372.94 is vulnerable (http://www.adobe.com/support/security/bulletins/apsb12-19.html) ?

Yeah, that's a really old security bulletin.  You're missing several hundred security fixes at this point.  We're continuously hardening Flash Player to make it harder for attackers, in addition to responding to real-world threats.  The bottom line is that you always want to be on the latest version.  If you're on a PowerPC-based Mac, upgrading may not be an option, but at that point, it's time to either uninstall Flash Player, or think seriously about upgrading to an Intel Mac.

If you're on an Intel Mac, simply download Flash Player from here: http://get.adobe.com/flashplayer and set it to update automatically.  You might run into an occasional bug, but that's far, far better than dealing with a malware infection and any subsequent real-world fallout.

Hi,

The Security Bulletin you link to states "Adobe has released security updates for Adobe Flash Player 11.3.300.271 and earlier versions for Windows..." and "Users of Adobe Flash Player 11.3.300.271 and earlier versions for Windows and Macintosh should update to Adobe Flash Player 11.4.402.265."  Version 11.3.372.94 is higher than 11.3.300.271 so it would not be affected by the vulnerabilities addressed in this Security Bulletin. 

However, looking on the Flash Player Archive page, and our internal documentation, it doesn't seem that 11.3.372.94 was a publicly released version. It may have been a beta release, but not a final release.  From where did you get this version of Flash Player?

Finally, 11.3 was released in 2012.  There have been many, many security vulnerability fixes since then.  It's highly recommended you install the latest, most secure version of Flash Player from https://get.adobe.com/flashplayer.

--

Maria