CVE-2012-0773

Executive Summary

Informations
Name	CVE-2012-0773	First vendor Publication	2012-03-28
Vendor	Cve	Last vendor Modification	2012-12-18

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0773

CWE : Common Weakness Enumeration

id	Name
CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16157

Oval ID:	oval:org.mitre.oval:def:16157
Title:	The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Description:	The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2012-0773	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.18 or 11.x before 11.2.202.228 installed Adobe Flash Player is Installed AND Flash version is before 10.3.183.18 or 11.x before 11.2.202.228 Version of Adobe Flash Player is less than 10.3.183.18 OR Adobe Flash Player 11.x before 11.2.202.228 installed Adobe Flash Player 11 is installed AND Version of Adobe Flash Player is less than 11.2.202.228 OR Adobe AIR before 3.2.0.2070 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 3.2.0.2070

Definition Id: oval:org.mitre.oval:def:15391

Oval ID:	oval:org.mitre.oval:def:15391
Title:	The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Description:	The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-0773	Version:	9
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal to 10.3.183.16 and is greater than or equal to 10.0.0.584 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal to 10.3.183.16 AND Determine if the version of Adobe Flash Player is greater than or equal to 10.0.0.584 OR Determine if the version of Adobe Flash Player is less than or equal to 9.125.0 and is greater than or equal to 9.0.9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal to 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal to 9.0.9.0 OR Determine if the version of Adobe Flash Player is equal to 8.x Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is equal to 8.x OR Determine if the version of Adobe Flash Player is equal to 7.x Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is equal to 7.x OR Determine if the version of Adobe Flash Player is equal to 6.x Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is equal to 6.x OR Determine if the version of Adobe Flash Player is equal to 5.x Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is equal to 5.x OR Determine if the version of Adobe Flash Player is equal to 4.x Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is equal to 4.x OR Determine if the version of Adobe Flash Player is equal to 3.x Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is equal to 3.x OR Determine if the version of Adobe Flash Player is equal to 2.x Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is equal to 2.x OR Determine if the version of Adobe Flash Player is less than or equal to 11.1.102.63 and is greater than or equal to 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal to 11.1.102.63 AND Determine if the version of Adobe Flash Player is greater than or equal to 11.0 OR Determine if the version of Adobe Air is less than or equal to 2.7 and is greater than or equal to 2.0.2 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal to 2.7 AND Determine if the version of Adobe Air is greater than or equal to 2.0.2 OR Determine if the version of Adobe Air is less than or equal to 1.5.3.9120 and is greater than or equal to 1.0.1 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal to 1.5.3.9120 AND Determine if the version of Adobe Air is greater than or equal to 1.0.1 OR Determine if the version of Adobe Air is less than or equal to 3.1.0.4880 and is greater than or equal to 3.0.0.408 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal to 3.1.0.4880 AND Determine if the version of Adobe Air is greater than or equal to 3.0.0.408

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Adobe Air cpe:/a:adobe:adobe_air:3.1.0.488 cpe:/a:adobe:adobe_air:3.1.0.485 cpe:/a:adobe:adobe_air:3.0.0.408 cpe:/a:adobe:adobe_air:2.7.1.19610 cpe:/a:adobe:adobe_air:2.7.1 cpe:/a:adobe:adobe_air:2.7.0.1953 cpe:/a:adobe:adobe_air:2.7.0.1948 cpe:/a:adobe:adobe_air:2.7 cpe:/a:adobe:adobe_air:2.6 cpe:/a:adobe:adobe_air:2.0.4 cpe:/a:adobe:adobe_air:2.0.3.13070 cpe:/a:adobe:adobe_air:2.0.3 cpe:/a:adobe:adobe_air:2.0.2 cpe:/a:adobe:adobe_air:1.5.3.9120 cpe:/a:adobe:adobe_air:1.5.3 cpe:/a:adobe:adobe_air:1.5.2 cpe:/a:adobe:adobe_air:1.5.1 cpe:/a:adobe:adobe_air:1.5 cpe:/a:adobe:adobe_air:1.1 cpe:/a:adobe:adobe_air:1.0.1 cpe:/a:adobe:adobe_air:1.0	21
Application	Adobe Flash Player cpe:/a:adobe:flash_player:11.1.111.7 cpe:/a:adobe:flash_player:11.1.111.6 cpe:/a:adobe:flash_player:11.1.111.5 cpe:/a:adobe:flash_player:11.1.102.63 cpe:/a:adobe:flash_player:11.1.102.62 cpe:/a:adobe:flash_player:11.1.102.59 cpe:/a:adobe:flash_player:11.1.102.55 cpe:/a:adobe:flash_player:11.1 cpe:/a:adobe:flash_player:11.0.1.153 cpe:/a:adobe:flash_player:11.0.1.152 cpe:/a:adobe:flash_player:11.0 cpe:/a:adobe:flash_player:10.3.183.7 cpe:/a:adobe:flash_player:10.3.183.5 cpe:/a:adobe:flash_player:10.3.183.16 cpe:/a:adobe:flash_player:10.3.183.15 cpe:/a:adobe:flash_player:10.3.183.11 cpe:/a:adobe:flash_player:10.3.183.10 cpe:/a:adobe:flash_player:10.3.181.34 cpe:/a:adobe:flash_player:10.3.181.26 cpe:/a:adobe:flash_player:10.3.181.22 cpe:/a:adobe:flash_player:10.3.181.16 cpe:/a:adobe:flash_player:10.3.181.14 cpe:/a:adobe:flash_player:10.2.159.1 cpe:/a:adobe:flash_player:10.2.157.51 cpe:/a:adobe:flash_player:10.2.156.12 cpe:/a:adobe:flash_player:10.2.154.25 cpe:/a:adobe:flash_player:10.2.154.13 cpe:/a:adobe:flash_player:10.2.153.1 cpe:/a:adobe:flash_player:10.2.152.33 cpe:/a:adobe:flash_player:10.2.152.32 cpe:/a:adobe:flash_player:10.2.152.26 cpe:/a:adobe:flash_player:10.2.152 cpe:/a:adobe:flash_player:10.1.95.2 cpe:/a:adobe:flash_player:10.1.95.1 cpe:/a:adobe:flash_player:10.1.92.8 cpe:/a:adobe:flash_player:10.1.92.10 cpe:/a:adobe:flash_player:10.1.85.3 cpe:/a:adobe:flash_player:10.1.82.76 cpe:/a:adobe:flash_player:10.1.53.64 cpe:/a:adobe:flash_player:10.1.52.15 cpe:/a:adobe:flash_player:10.1.52.14.1 cpe:/a:adobe:flash_player:10.1.106.16 cpe:/a:adobe:flash_player:10.1.105.6 cpe:/a:adobe:flash_player:10.1.102.64 cpe:/a:adobe:flash_player:10.1 cpe:/a:adobe:flash_player:10.0.45.2 cpe:/a:adobe:flash_player:10.0.42.34 cpe:/a:adobe:flash_player:10.0.32.18 cpe:/a:adobe:flash_player:10.0.22.87 cpe:/a:adobe:flash_player:10.0.15.3 cpe:/a:adobe:flash_player:10.0.12.36 cpe:/a:adobe:flash_player:10.0.12.10 cpe:/a:adobe:flash_player:10.0.0.584 cpe:/a:adobe:flash_player:10 cpe:/a:adobe:flash_player:9.125.0 cpe:/a:adobe:flash_player:9.0.9.0 cpe:/a:adobe:flash_player:9.0.48.0 cpe:/a:adobe:flash_player:9.0.47.0 cpe:/a:adobe:flash_player:9.0.45.0 cpe:/a:adobe:flash_player:9.0.31.0 cpe:/a:adobe:flash_player:9.0.31 cpe:/a:adobe:flash_player:9.0.283.0 cpe:/a:adobe:flash_player:9.0.280 cpe:/a:adobe:flash_player:9.0.28.0 cpe:/a:adobe:flash_player:9.0.28 cpe:/a:adobe:flash_player:9.0.277.0 cpe:/a:adobe:flash_player:9.0.262.0 cpe:/a:adobe:flash_player:9.0.260.0 cpe:/a:adobe:flash_player:9.0.246.0 cpe:/a:adobe:flash_player:9.0.20.0 cpe:/a:adobe:flash_player:9.0.20 cpe:/a:adobe:flash_player:9.0.18d60 cpe:/a:adobe:flash_player:9.0.16 cpe:/a:adobe:flash_player:9.0.159.0 cpe:/a:adobe:flash_player:9.0.155.0 cpe:/a:adobe:flash_player:9.0.152.0 cpe:/a:adobe:flash_player:9.0.151.0 cpe:/a:adobe:flash_player:9.0.125.0 cpe:/a:adobe:flash_player:9.0.124.0 cpe:/a:adobe:flash_player:9.0.115.0 cpe:/a:adobe:flash_player:9.0.114.0 cpe:/a:adobe:flash_player:9.0.112.0 cpe:/a:adobe:flash_player:9 cpe:/a:adobe:flash_player:8.0.42.0 cpe:/a:adobe:flash_player:8.0.39.0 cpe:/a:adobe:flash_player:8.0.35.0 cpe:/a:adobe:flash_player:8.0.34.0 cpe:/a:adobe:flash_player:8.0.33.0 cpe:/a:adobe:flash_player:8.0.24.0 cpe:/a:adobe:flash_player:8.0.22.0 cpe:/a:adobe:flash_player:8.0 cpe:/a:adobe:flash_player:8 cpe:/a:adobe:flash_player:7.2 cpe:/a:adobe:flash_player:7.1.1 cpe:/a:adobe:flash_player:7.1 cpe:/a:adobe:flash_player:7.0.73.0 cpe:/a:adobe:flash_player:7.0.70.0 cpe:/a:adobe:flash_player:7.0.69.0 cpe:/a:adobe:flash_player:7.0.68.0 cpe:/a:adobe:flash_player:7.0.67.0 cpe:/a:adobe:flash_player:7.0.66.0 cpe:/a:adobe:flash_player:7.0.63 cpe:/a:adobe:flash_player:7.0.61.0 cpe:/a:adobe:flash_player:7.0.60.0 cpe:/a:adobe:flash_player:7.0.53.0 cpe:/a:adobe:flash_player:7.0.25 cpe:/a:adobe:flash_player:7.0.24.0 cpe:/a:adobe:flash_player:7.0.19.0 cpe:/a:adobe:flash_player:7.0.14.0 cpe:/a:adobe:flash_player:7.0.1 cpe:/a:adobe:flash_player:7.0 cpe:/a:adobe:flash_player:7 cpe:/a:adobe:flash_player:6.0.79 cpe:/a:adobe:flash_player:6.0.21.0 cpe:/a:adobe:flash_player:6 cpe:/a:adobe:flash_player:5 cpe:/a:adobe:flash_player:4 cpe:/a:adobe:flash_player:3 cpe:/a:adobe:flash_player:2	119

Internal Sources (Detail)

Source	Url
CONFIRM	http://www.adobe.com/support/security/bulletins/apsb12-07.html
GENTOO	http://security.gentoo.org/glsa/glsa-201204-07.xml
SECTRACK	http://www.securitytracker.com/id?1026859
SECUNIA	http://secunia.com/advisories/48618 http://secunia.com/advisories/48819
SUSE	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00017.html http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00018.html

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 22:33:47	Multiple Updates
2012-12-19 13:24:53	Multiple Updates

Type	Count
Oval ID(s)	2
CPE ID(s)	140

Related	Severity
RHSA-2012:0434	(Critical)
GLSA-201204-07	(Critical)

Same Subject	Severity
Login to view 20 more Alert(s)

CVE-2012-0773

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

COMPANY

STANDARDS

RECENT POSTS

MENU