PT-2012-2858 · Adobe · Flash Player+1

Publicado 2012-03-28 · Atualizado 2018-10-30 · CVE-2012-0772

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.18 Adobe Flash Player versions 11.x prior to 11.2.202.228 Adobe AIR versions prior to 3.2.0.2070

Description The issue is related to an unspecified ActiveX control that does not properly perform URL security domain checking. This can allow attackers to execute arbitrary code or cause a denial of service due to memory corruption via unknown vectors.

Recommendations For Adobe Flash Player versions prior to 10.3.183.18, update to version 10.3.183.18 or later. For Adobe Flash Player versions 11.x prior to 11.2.202.228, update to version 11.2.202.228 or later. For Adobe AIR versions prior to 3.2.0.2070, update to version 3.2.0.2070 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0772

Produtos afetados

Air

Flash Player

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-0772 · Nota de Segurança
• http://secunia.com/advisories/48618 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15266 · Nota
• http://securitytracker.com/id?1026859 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0772 · Nota
• http://adobe.com/support/security/bulletins/apsb12-07.html · Aviso do Fabricante
• http://osvdb.org/80706 · Nota
• http://xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf · Nota