PT-2012-6075 · Adobe+2 · Flash Player+4
Publicado
2012-12-12
·
Atualizado
2018-12-04
·
CVE-2012-5677
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions prior to 10.3.183.48 and 11.x prior to 11.5.502.135 on Windows
Adobe Flash Player versions prior to 10.3.183.48 and 11.x prior to 11.5.502.136 on Mac OS X
Adobe Flash Player versions prior to 10.3.183.48 and 11.x prior to 11.2.202.258 on Linux
Adobe Flash Player versions prior to 11.1.111.29 on Android 2.x and 3.x
Adobe Flash Player versions prior to 11.1.115.34 on Android 4.x
Adobe AIR versions prior to 3.5.0.880 on Windows
Adobe AIR versions prior to 3.5.0.890 on Mac OS X
Adobe AIR SDK versions prior to 3.5.0.880 on Windows
Adobe AIR SDK versions prior to 3.5.0.890 on Mac OS X
Description
The issue allows remote attackers to execute arbitrary code through unspecified vectors due to an integer overflow in Adobe Flash Player and related products.
Recommendations
For Adobe Flash Player on Windows, update to version 10.3.183.48 or later, or 11.5.502.135 or later.
For Adobe Flash Player on Mac OS X, update to version 10.3.183.48 or later, or 11.5.502.136 or later.
For Adobe Flash Player on Linux, update to version 10.3.183.48 or later, or 11.2.202.258 or later.
For Adobe Flash Player on Android 2.x and 3.x, update to version 11.1.111.29 or later.
For Adobe Flash Player on Android 4.x, update to version 11.1.115.34 or later.
For Adobe AIR on Windows, update to version 3.5.0.880 or later.
For Adobe AIR on Mac OS X, update to version 3.5.0.890 or later.
For Adobe AIR SDK on Windows, update to version 3.5.0.880 or later.
For Adobe AIR SDK on Mac OS X, update to version 3.5.0.890 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Air
Air Sdk
Flash Player
Red Hat
Suse