PT-2012-5885 · Adobe+1 · Flash Player+3

Publicado

2012-10-09

·

Atualizado

2017-08-29

·

CVE-2012-5286

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows and Mac OS X Adobe Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.2.202.243 on Linux Adobe Flash Player versions prior to 11.1.111.19 on Android 2.x and 3.x Adobe Flash Player versions prior to 11.1.115.20 on Android 4.x Adobe AIR versions prior to 3.4.0.2710 Adobe AIR SDK versions prior to 3.4.0.2710
Description A buffer overflow issue allows attackers to execute arbitrary code via unspecified vectors. This is a distinct issue from other buffer overflow problems in Flash Player.
Recommendations For Adobe Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows and Mac OS X, update to version 10.3.183.29 or 11.4.402.287 or later. For Adobe Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.2.202.243 on Linux, update to version 10.3.183.29 or 11.2.202.243 or later. For Adobe Flash Player versions prior to 11.1.111.19 on Android 2.x and 3.x, update to version 11.1.111.19 or later. For Adobe Flash Player versions prior to 11.1.115.20 on Android 4.x, update to version 11.1.115.20 or later. For Adobe AIR versions prior to 3.4.0.2710, update to version 3.4.0.2710 or later. For Adobe AIR SDK versions prior to 3.4.0.2710, update to version 3.4.0.2710 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-5286
RHSA-2012:1346
RHSA-2012_1346

Produtos afetados

Air
Air Sdk
Flash Player
Red Hat