PT-2012-2842 · Adobe+2 · Flash Player+2

Published

2012-02-16

·

Updated

2023-01-30

·

CVE-2012-0753

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.15 Adobe Flash Player versions 11.x prior to 11.1.102.62 Adobe Flash Player versions 11.x prior to 11.1.111.6 on Android 2.x and 3.x Adobe Flash Player versions 11.x prior to 11.1.115.6 on Android 4.x
Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption via crafted MP4 data.
Recommendations For Adobe Flash Player versions prior to 10.3.183.15, update to version 10.3.183.15 or later. For Adobe Flash Player versions 11.x prior to 11.1.102.62, update to version 11.1.102.62 or later. For Adobe Flash Player versions 11.x prior to 11.1.111.6 on Android 2.x and 3.x, update to version 11.1.111.6 or later. For Adobe Flash Player versions 11.x prior to 11.1.115.6 on Android 4.x, update to version 11.1.115.6 or later.

Exploit

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2012-0753
RHSA-2012:0144
RHSA-2012_0144

Affected Products

Flash Player
Red Hat
Suse