PT-2012-2858 · Adobe · Flash Player+1

Published 2012-03-28 · Updated 2018-10-30 · CVE-2012-0772

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.18 Adobe Flash Player versions 11.x prior to 11.2.202.228 Adobe AIR versions prior to 3.2.0.2070

Description The issue is related to an unspecified ActiveX control that does not properly perform URL security domain checking. This can allow attackers to execute arbitrary code or cause a denial of service due to memory corruption via unknown vectors.

Recommendations For Adobe Flash Player versions prior to 10.3.183.18, update to version 10.3.183.18 or later. For Adobe Flash Player versions 11.x prior to 11.2.202.228, update to version 11.2.202.228 or later. For Adobe AIR versions prior to 3.2.0.2070, update to version 3.2.0.2070 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0772

Affected Products

Air

Flash Player

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-0772 · Security Note
• http://adobe.com/support/security/bulletins/apsb12-07.html · Vendor Advisory
• http://secunia.com/advisories/48618 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15266 · Note
• http://securitytracker.com/id?1026859 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0772 · Note
• http://osvdb.org/80706 · Note
• http://xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf · Note