CVE-2012-0773 The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flas...
HighCVSS 9.3
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | < 10.3.183.18 | 10.3.183.18 |
| Adobe flash player | >= 11.0, < 11.2.202.228 | 11.2.202.228 |
| Adobe flash player | < 11.1.111.8 | 11.1.111.8 |
| Adobe flash player | >= 11.0, < 11.2.202.223 | 11.2.202.223 |
| adobe air | < 3.2.0.2070 | 3.2.0.2070 |
| xerox freeflow print server | = 8.0 | No fix listed |
| xerox freeflow print server | = 8.0-sp1 | No fix listed |
| xerox freeflow print server | = 8.0-sp2 | No fix listed |
References
- openSUSE-SU-2012:0427 broken-link vendor-advisory
- SUSE-SU-2012:0437 broken-link vendor-advisory
- 48618 broken-link third-party-advisory
- 48652 broken-link third-party-advisory
- 48819 broken-link third-party-advisory
- GLSA-201204-07 third-party-advisory vendor-advisory
- www.adobe.com broken-link patch vendor-advisory
- 1026859 third-party-advisory vdb-entry
- www.xerox.com third-party-advisory
- oval:org.mitre.oval:def:15391 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:16157 signature third-party-advisory vdb-entry