PT-2012-5856 · Adobe+2 · Flash Player+4

Published 2012-10-09 · Updated 2017-08-29 · CVE-2012-5253

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows and Mac OS X Adobe Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.2.202.243 on Linux Adobe Flash Player versions prior to 11.1.111.19 on Android 2.x and 3.x Adobe Flash Player versions prior to 11.1.115.20 on Android 4.x Adobe AIR versions prior to 3.4.0.2710 Adobe AIR SDK versions prior to 3.4.0.2710

Description The issue allows attackers to execute arbitrary code via unspecified vectors. This is a buffer overflow issue in Adobe Flash Player and related products.

Recommendations For Adobe Flash Player on Windows and Mac OS X, update to version 10.3.183.29 or 11.4.402.287 or later. For Adobe Flash Player on Linux, update to version 10.3.183.29 or 11.2.202.243 or later. For Adobe Flash Player on Android 2.x and 3.x, update to version 11.1.111.19 or later. For Adobe Flash Player on Android 4.x, update to version 11.1.115.20 or later. For Adobe AIR, update to version 3.4.0.2710 or later. For Adobe AIR SDK, update to version 3.4.0.2710 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-5253

OPENSUSE-SU-2012_1324-1

OPENSUSE-SU-2013_0370-1

RHSA-2012:1346

RHSA-2012_1346

Affected Products

Air

Air Sdk

Flash Player

Red Hat

Suse

References · 59

• https://nvd.nist.gov/vuln/detail/CVE-2012-5253 · Security Note
• http://adobe.com/support/security/bulletins/apsb12-22.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html · Vendor Advisory
• http://support.novell.com/security/cve/CVE-2012-5257.html · Note
• https://access.redhat.com/security/cve/CVE-2012-5268 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5253 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79074 · Note
• https://bugzilla.novell.com/784168 · Note
• https://access.redhat.com/security/cve/CVE-2012-5272 · Note
• https://access.redhat.com/security/cve/CVE-2012-5250 · Note
• http://support.novell.com/security/cve/CVE-2012-5254.html · Note
• https://access.redhat.com/security/cve/CVE-2012-5255 · Note
• http://support.novell.com/security/cve/CVE-2012-5269.html · Note
• http://support.novell.com/security/cve/CVE-2012-5258.html · Note
• https://access.redhat.com/security/cve/CVE-2012-5251 · Note