10 - GLSA-201206-21

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Adobe Flash Player: Multiple vulnerabilities

Informations
Name	GLSA-201206-21	First vendor Publication	2012-06-23
Vendor	Gentoo	Last vendor Modification	2012-06-23
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities have been found in Adobe Flash Player could result in the execution of arbitrary code or Denial of Service.

Background

The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites.

Description

Multiple vulnerabilities have been discovered in Adobe Flash Player.
Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted SWF file, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Adobe Flash Player users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.236"

References

[ 1 ] CVE-2012-0779 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0779
[ 2 ] CVE-2012-2034 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2034
[ 3 ] CVE-2012-2035 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2035
[ 4 ] CVE-2012-2036 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2036
[ 5 ] CVE-2012-2037 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2037
[ 6 ] CVE-2012-2038 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2038
[ 7 ] CVE-2012-2039 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2039
[ 8 ] CVE-2012-2040 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2040

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201206-21.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-201206-21.xml

CWE : Common Weakness Enumeration

%	Id	Name
29 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
14 %	CWE-787	Out-of-bounds Write (CWE/SANS Top 25)
14 %	CWE-476	NULL Pointer Dereference
14 %	CWE-426	Untrusted Search Path
14 %	CWE-200	Information Exposure
14 %	CWE-190	Integer Overflow or Wraparound (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:20424

Oval ID:	oval:org.mitre.oval:def:20424
Title:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 and Adobe AIR before 3.3.0.3610 on Windows, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034
Description:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2037	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than 10.3.183.20 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than 10.3.183.20 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.2.0.2070 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.235 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than 10.3.183.20 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:20459

Oval ID:	oval:org.mitre.oval:def:20459
Title:	Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 and Adobe AIR before 3.3.0.3610 on Windows, allows attackers to execute arbitrary code via unspecified vectors
Description:	Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2035	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than 10.3.183.20 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than 10.3.183.20 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.2.0.2070 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.235 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than 10.3.183.20 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:20472

Oval ID:	oval:org.mitre.oval:def:20472
Title:	Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability"
Description:	Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-0779	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.233 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.233 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 10.3.183.19 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than or equal 10.3.183.19 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.233 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.3.183.19 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:20632

Oval ID:	oval:org.mitre.oval:def:20632
Title:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 and Adobe AIR before 3.3.0.3610 on Windows, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors
Description:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2038	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than 10.3.183.20 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than 10.3.183.20 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.2.0.2070 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.235 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than 10.3.183.20 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:20654

Oval ID:	oval:org.mitre.oval:def:20654
Title:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 and Adobe AIR before 3.3.0.3610 on Windows, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037
Description:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2034	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than 10.3.183.20 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than 10.3.183.20 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.2.0.2070 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.235 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than 10.3.183.20 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:20682

Oval ID:	oval:org.mitre.oval:def:20682
Title:	Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 and Adobe AIR before 3.3.0.3610 on Windows, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory
Description:	Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2040	Version:	6
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than 10.3.183.20 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than 10.3.183.20 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.2.0.2070 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.235 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than 10.3.183.20 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:20838

Oval ID:	oval:org.mitre.oval:def:20838
Title:	Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 and Adobe AIR before 3.3.0.3610 on Windows, allows attackers to execute arbitrary code via unspecified vectors
Description:	Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2036	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than 10.3.183.20 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than 10.3.183.20 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.2.0.2070 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.235 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than 10.3.183.20 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:20840

Oval ID:	oval:org.mitre.oval:def:20840
Title:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 and Adobe AIR before 3.3.0.3610 on Windows, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors
Description:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2039	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 and is greater than or equal 11.0 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than or equal 11.2.202.235 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than 10.3.183.20 and is greater than or equal 10.0 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player is less than 10.3.183.20 AND Determine if the version of Adobe Flash Player is greater than or equal 10.0 OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 and is greater than or equal 9.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 AND Determine if the version of Adobe Flash Player is greater than or equal 9.0 OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 and is greater than or equal 8.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 AND Determine if the version of Adobe Flash Player is greater than or equal 8.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 and is greater than or equal 7.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 AND Determine if the version of Adobe Flash Player is greater than or equal 7.0 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 and is greater than or equal 6.0.21.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 AND Determine if the version of Adobe Flash Player is greater than or equal 6.0.21.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.2.0.2070 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.2.202.235 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 10 section Determine if the version of Flash.ocx is less than 10.3.183.20 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0 OR Flash.ocx 8 section Determine if the version of Flash.ocx is less than or equal 8.0.42.0 AND Determine if the version of Flash.ocx is greater than or equal 8.0 OR Flash.ocx 7 section Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is greater than or equal 7.0 OR Flash.ocx 6 section Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is greater than or equal 6.0.21.0

Definition Id: oval:org.mitre.oval:def:21162

Oval ID:	oval:org.mitre.oval:def:21162
Title:	RHSA-2012:0688: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0688-02 CVE-2012-0779	Version:	6
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:10.3.183.19-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:10.3.183.19-1.el6

Definition Id: oval:org.mitre.oval:def:21376

Oval ID:	oval:org.mitre.oval:def:21376
Title:	RHSA-2012:0722: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0722-02 CVE-2012-2034 CVE-2012-2035 CVE-2012-2036 CVE-2012-2037 CVE-2012-2038 CVE-2012-2039	Version:	83
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:10.3.183.20-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:10.3.183.20-1.el6

Definition Id: oval:org.mitre.oval:def:23345

Oval ID:	oval:org.mitre.oval:def:23345
Title:	ELSA-2012:0722: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0722-02 CVE-2012-2034 CVE-2012-2035 CVE-2012-2036 CVE-2012-2037 CVE-2012-2038 CVE-2012-2039	Version:	29
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:10.3.183.20-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:23705

Oval ID:	oval:org.mitre.oval:def:23705
Title:	DEPRECATED: ELSA-2012:0688: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0688-02 CVE-2012-0779	Version:	7
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:10.3.183.19-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:25131

Oval ID:	oval:org.mitre.oval:def:25131
Title:	ELSA-2012:0688: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes one vulnerability in Adobe Flash Player. This vulnerability is detailed on the Adobe security page APSB12-09, listed in the References section. Specially-crafted SWF content could cause flash-plugin to crash or, potentially, execute arbitrary code when a victim loads a page containing the specially-crafted SWF content. (CVE-2012-0779) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 10.3.183.19.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0688-03 CVE-2012-0779	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
Oracle Linux 6.x AND flash-plugin is earlier than 0:10.3.183.19-1.el6

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Air cpe:2.3:a:adobe:air:3.2:::::::* cpe:2.3:a:adobe:air:2.7.1.1961:::::::* cpe:2.3:a:adobe:air:2.7.0.1953:::::::* cpe:2.3:a:adobe:air:2.7.0.1948:::::::* cpe:2.3:a:adobe:air:2.6:::::::* cpe:2.3:a:adobe:air:2.5.1:::::::* cpe:2.3:a:adobe:air:2.5:::::::* cpe:2.3:a:adobe:air:2.0.0:::::::* cpe:2.3:a:adobe:air:1.5.3.9130:::::::* cpe:2.3:a:adobe:air:1.5.3:::::::* cpe:2.3:a:adobe:air:1.5.2:::::::* cpe:2.3:a:adobe:air:1.5.1:::::::* cpe:2.3:a:adobe:air:1.5:::::::* cpe:2.3:a:adobe:air:1.1:::::::* cpe:2.3:a:adobe:air:1.01:::::::* cpe:2.3:a:adobe:air:1.0:::::::* cpe:2.3:a:adobe:air::::::::	17
Application	Adobe Flash Player cpe:2.3:a:adobe:flash_player:11.2.202.235:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.233:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.228:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.223:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.81:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.69:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.58:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.48:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.36:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.34:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.8:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.73:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.64:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.6:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.50:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.5:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.44:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.13:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.62:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.1.102.55::::::x64: cpe:2.3:a:adobe:flash_player:11.1:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.153:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.0.1.152::::::x64: cpe:2.3:a:adobe:flash_player:11.0:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.6:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.3:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.24:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.21:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.86:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.75:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.68:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.67:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.63:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.61:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.51:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.50:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.5:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.48:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.43:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.29:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.20:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.19:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.18:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.15:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.11:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.10:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.36:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.34:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.26:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.14:::::::* cpe:2.3:a:adobe:flash_player:10.3.:::::::* cpe:2.3:a:adobe:flash_player:10.3:::::::* cpe:2.3:a:adobe:flash_player:10.2.159.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.157.51:::::::* cpe:2.3:a:adobe:flash_player:10.2.156.12:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.25:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.13:::::::* cpe:2.3:a:adobe:flash_player:10.2.153.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.33:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.32:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.26:::::::* cpe:2.3:a:adobe:flash_player:10.2.152:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.2:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.8:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.10:::::::* cpe:2.3:a:adobe:flash_player:10.1.85.3:::::::* cpe:2.3:a:adobe:flash_player:10.1.82.76:::::::* cpe:2.3:a:adobe:flash_player:10.1.53.64:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.15:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.17:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.16:::::::* cpe:2.3:a:adobe:flash_player:10.1.105.6:::::::* cpe:2.3:a:adobe:flash_player:10.1.102.64:::::::* cpe:2.3:a:adobe:flash_player:10.1:::::::* cpe:2.3:a:adobe:flash_player:10.0.45.2:::::::* cpe:2.3:a:adobe:flash_player:10.0.42.34:::::::* cpe:2.3:a:adobe:flash_player:10.0.32.18:::::::* cpe:2.3:a:adobe:flash_player:10.0.22.87:::::::* cpe:2.3:a:adobe:flash_player:10.0.2.54:::::::* cpe:2.3:a:adobe:flash_player:10.0.15.3:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.36:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.10:::::::* cpe:2.3:a:adobe:flash_player:10.0.0.584:::::::* cpe:2.3:a:adobe:flash_player:10:::::::* cpe:2.3:a:adobe:flash_player:9.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.9.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.8.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.48.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.47.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.45.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31:::::::* cpe:2.3:a:adobe:flash_player:9.0.283.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.280:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0::mac_os_x::::: cpe:2.3:a:adobe:flash_player:9.0.28:::::::* cpe:2.3:a:adobe:flash_player:9.0.277.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.262.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.260.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.246.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20:::::::* cpe:2.3:a:adobe:flash_player:9.0.18d60:::::::* cpe:2.3:a:adobe:flash_player:9.0.16.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.16:::::::* cpe:2.3:a:adobe:flash_player:9.0.16::windows::::: cpe:2.3:a:adobe:flash_player:9.0.159.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.155.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.152.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.151.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.124.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.115.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.114.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.112.0:::::::* cpe:2.3:a:adobe:flash_player:9.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.42.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.39.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.35.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.34.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.33.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.22.0:::::::* cpe:2.3:a:adobe:flash_player:8.0:::::::* cpe:2.3:a:adobe:flash_player:8.0::pro::::: cpe:2.3:a:adobe:flash_player:8.0::basic::::: cpe:2.3:a:adobe:flash_player:8::professional::::: cpe:2.3:a:adobe:flash_player:8::pro::::: cpe:2.3:a:adobe:flash_player:7.2:::::::* cpe:2.3:a:adobe:flash_player:7.1.1:::::::* cpe:2.3:a:adobe:flash_player:7.1:::::::* cpe:2.3:a:adobe:flash_player:7.0.73.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.70.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.69.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.68.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.67.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.66.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.63:::::::* cpe:2.3:a:adobe:flash_player:7.0.63::linux::::: cpe:2.3:a:adobe:flash_player:7.0.61.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.60.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.53.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.25:::::::* cpe:2.3:a:adobe:flash_player:7.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.19.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.14.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.1:::::::* cpe:2.3:a:adobe:flash_player:7.0_r67::solaris::::: cpe:2.3:a:adobe:flash_player:7.0_r67:::::::* cpe:2.3:a:adobe:flash_player:7.0:::::::* cpe:2.3:a:adobe:flash_player:6.0.79:::::::* cpe:2.3:a:adobe:flash_player:6.0.21.0:::::::* cpe:2.3:a:adobe:flash_player:6:::::::* cpe:2.3:a:adobe:flash_player:5:::::::* cpe:2.3:a:adobe:flash_player:4:::::::* cpe:2.3:a:adobe:flash_player:3:::::::* cpe:2.3:a:adobe:flash_player:2:::::::* cpe:2.3:a:adobe:flash_player:mx_2004:::::::* cpe:2.3:a:adobe:flash_player:cs4::pro::::: cpe:2.3:a:adobe:flash_player:cs3::pro::::: cpe:2.3:a:adobe:flash_player:cs3::professional::::: cpe:2.3:a:adobe:flash_player:::::::: cpe:2.3:a:adobe:flash_player:::basic:::::* cpe:2.3:a:adobe:flash_player:::pro:::::* cpe:2.3:a:adobe:flash_player::::::edge::* cpe:2.3:a:adobe:flash_player::::::internet_explorer_11::* cpe:2.3:a:adobe:flash_player::::::chrome::* cpe:2.3:a:adobe:flash_player:-:::::::*	195
Application	Google Android cpe:2.3:a:google:android:1.1:::::::* cpe:2.3:a:google:android:1.0:::::::*	2
Os	Google Android cpe:2.3:o:google:android:4.4.4:::::::* cpe:2.3:o:google:android:4.4.3:::::::* cpe:2.3:o:google:android:4.4.2:::::::* cpe:2.3:o:google:android:4.4.1:::::::* cpe:2.3:o:google:android:4.4:::::::* cpe:2.3:o:google:android:4.3.1:::::::* cpe:2.3:o:google:android:4.3:::::::* cpe:2.3:o:google:android:4.2.2:::::::* cpe:2.3:o:google:android:4.2.1:::::::* cpe:2.3:o:google:android:4.2:::::::* cpe:2.3:o:google:android:4.1.2:::::::* cpe:2.3:o:google:android:4.1.1:::::::* cpe:2.3:o:google:android:4.1:::::::* cpe:2.3:o:google:android:4.0.4:::::::* cpe:2.3:o:google:android:4.0.3:::::::* cpe:2.3:o:google:android:4.0.2:::::::* cpe:2.3:o:google:android:4.0.1:::::::* cpe:2.3:o:google:android:4.0:::::::* cpe:2.3:o:google:android:3.2.6:::::::* cpe:2.3:o:google:android:3.2.4:::::::* cpe:2.3:o:google:android:3.2.2:::::::* cpe:2.3:o:google:android:3.2.1:::::::* cpe:2.3:o:google:android:3.2:::::::* cpe:2.3:o:google:android:3.1:::::::* cpe:2.3:o:google:android:3.0:::::::* cpe:2.3:o:google:android:2.3.7:::::::* cpe:2.3:o:google:android:2.3.6:::::::* cpe:2.3:o:google:android:2.3.5:::::::* cpe:2.3:o:google:android:2.3.4:::::::* cpe:2.3:o:google:android:2.3.3:::::::* cpe:2.3:o:google:android:2.3.2:::::::* cpe:2.3:o:google:android:2.3.1:::::::* cpe:2.3:o:google:android:2.3:rev1:::::: cpe:2.3:o:google:android:2.3:::::::* cpe:2.3:o:google:android:2.2.3:::::::* cpe:2.3:o:google:android:2.2.2:::::::* cpe:2.3:o:google:android:2.2.1:::::::* cpe:2.3:o:google:android:2.2:rev1:::::: cpe:2.3:o:google:android:2.2:::::::* cpe:2.3:o:google:android:2.1:::::::* cpe:2.3:o:google:android:2.0.3:::::::* cpe:2.3:o:google:android:2.0.1:::::::* cpe:2.3:o:google:android:2.0:::::::* cpe:2.3:o:google:android:1.6:::::::* cpe:2.3:o:google:android:1.5:::::::* cpe:2.3:o:google:android:1.1:::::::* cpe:2.3:o:google:android:1.0:::::::* cpe:2.3:o:google:android:::::::: cpe:2.3:o:google:android:-:::::::*	49

SAINT Exploits

Description	Link
Adobe Flash Player Object Confusion Code Execution	More info here

ExploitDB Exploits

id	Description
2012-06-25	Adobe Flash Player Object Type Confusion

OpenVAS Exploits

Date	Description
2012-12-13	Name : SuSE Update for update openSUSE-SU-2012:0594-1 (update) File : nvt/gb_suse_2012_0594_1.nasl
2012-12-13	Name : SuSE Update for flash-player openSUSE-SU-2012:0723-1 (flash-player) File : nvt/gb_suse_2012_0723_1.nasl
2012-11-26	Name : FreeBSD Ports: linux-f10-flashplugin File : nvt/freebsd_linux-f10-flashplugin5.nasl
2012-08-10	Name : FreeBSD Ports: linux-f10-flashplugin File : nvt/freebsd_linux-f10-flashplugin3.nasl
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-21 (Adobe Flash Player) File : nvt/glsa_201206_21.nasl
2012-06-20	Name : Adobe Flash Player Multiple Vulnerabilities June-2012 (Linux) File : nvt/gb_adobe_flash_player_mult_vuln_jun12_lin.nasl
2012-06-20	Name : Adobe Flash Player Multiple Vulnerabilities June-2012 (Mac OS X) File : nvt/gb_adobe_prdts_mult_vuln_jun12_macosx.nasl
2012-06-20	Name : Adobe Flash Player Multiple Vulnerabilities June-2012 (Windows) File : nvt/gb_adobe_prdts_mult_vuln_jun12_win.nasl
2012-05-08	Name : Adobe Flash Player Object Confusion Remote Code Execution Vulnerability (Linux) File : nvt/gb_adobe_flash_player_obj_code_exec_vuln_lin.nasl
2012-05-08	Name : Adobe Flash Player Object Confusion Remote Code Execution Vulnerability (Mac ... File : nvt/gb_adobe_flash_player_obj_code_exec_vuln_macosx.nasl
2012-05-08	Name : Adobe Flash Player Object Confusion Remote Code Execution Vulnerability (Wind... File : nvt/gb_adobe_flash_player_obj_code_exec_vuln_win.nasl

Snort® IPS/IDS

Date	Description
2014-01-10	Oracle JavaScript heap exploitation library usage attempt RuleID : 25006 - Revision : 8 - Type : FILE-JAVA
2014-01-10	Adobe Flash Player object confusion attempt RuleID : 24142 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash malformed RTMP response attempt RuleID : 24141 - Revision : 2 - Type : FILE-FLASH
2014-01-10	Adobe Flash malformed RTMP response attempt RuleID : 24140 - Revision : 9 - Type : FILE-FLASH
2014-01-10	Adobe Flash malformed RTMP response attempt RuleID : 24139 - Revision : 12 - Type : FILE-FLASH
2014-01-10	Adobe Flash malformed RTMP response attempt RuleID : 24138 - Revision : 9 - Type : FILE-FLASH
2014-01-10	Oracle JavaScript heap exploitation library usage attempt RuleID : 23614 - Revision : 12 - Type : FILE-JAVA
2014-01-10	Adobe Flash Player flash.DisplayObject memory corruption attempt RuleID : 23135 - Revision : 9 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player broker destructor DoS attempt RuleID : 23134 - Revision : 5 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player flash.display.BitmapData constuctor overflow attempt RuleID : 23133 - Revision : 8 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player DefineSound tag long recordheader length field attempt RuleID : 23132 - Revision : 6 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player X500 DistinguishedName property access attempt RuleID : 23131 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player X509 direct instantiation property access attempt RuleID : 23130 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player SecureSocket use without Connect attempt RuleID : 23129 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player object confusion attempt RuleID : 22916 - Revision : 9 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player object confusion attempt RuleID : 22915 - Revision : 9 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player object confusion attempt RuleID : 22070 - Revision : 9 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player object confusion attempt RuleID : 22069 - Revision : 9 - Type : FILE-FLASH
2014-01-10	Adobe Flash systemMemoryCall RTMP query RuleID : 22068 - Revision : 3 - Type : FILE-FLASH
2014-01-10	Adobe Flash malformed error response RuleID : 22067 - Revision : 3 - Type : FILE-FLASH
2014-01-10	Phoenix exploit kit post-compromise behavior RuleID : 21860 - Revision : 5 - Type : MALWARE-CNC
2014-01-10	Phoenix exploit kit landing page RuleID : 21640 - Revision : 6 - Type : EXPLOIT-KIT

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-262.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-315.nasl - Type : ACT_GATHER_INFO
2013-01-25	Name : The remote SuSE 11 host is missing a security update. File : suse_11_flash-player-120506.nasl - Type : ACT_GATHER_INFO
2013-01-25	Name : The remote SuSE 11 host is missing a security update. File : suse_11_flash-player-120610.nasl - Type : ACT_GATHER_INFO
2012-11-06	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_36533a59277011e2bb44003067b2972c.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-21.nasl - Type : ACT_GATHER_INFO
2012-06-13	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2012-0722.nasl - Type : ACT_GATHER_INFO
2012-06-12	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_flash-player-8182.nasl - Type : ACT_GATHER_INFO
2012-06-11	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_38195f00b21511e18132003067b2972c.nasl - Type : ACT_GATHER_INFO
2012-06-09	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb12-14.nasl - Type : ACT_GATHER_INFO
2012-06-09	Name : The remote Windows host has a browser plugin that is affected by multiple vul... File : flash_player_apsb12-14.nasl - Type : ACT_GATHER_INFO
2012-06-09	Name : The remote Mac OS X host contains a version of Adobe AIR that is affected by ... File : macosx_adobe_air_3_3_0_3610.nasl - Type : ACT_GATHER_INFO
2012-06-09	Name : The remote Mac OS X host has a browser plugin that is affected by multiple vu... File : macosx_flash_player_11_3_300_257.nasl - Type : ACT_GATHER_INFO
2012-05-24	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2012-0688.nasl - Type : ACT_GATHER_INFO
2012-05-04	Name : The remote Windows host has a browser plugin that is affected by a code execu... File : flash_player_apsb12-09.nasl - Type : ACT_GATHER_INFO
2012-05-04	Name : The remote Mac OS X host has a browser plugin that is affected by a code exec... File : macosx_flash_player_11_2_202_235.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:37:24	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	7
Oval ID(s)	13
CPE ID(s)	263
Saint Exploit(s)	1
ExploitDB Exploit(s)	1
Openvas Exploit(s)	11
Snort® Rule(s)	22
Nessus® Exploit(s)	16

	Related
9.3	CVE-2012-2040
9.3	CVE-2012-2039
9.3	CVE-2012-2037
9.3	CVE-2012-2036
9.3	CVE-2012-2035
9.3	CVE-2012-2034
9.3	CVE-2012-0779
4.3	CVE-2012-2038
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 8 more Alert(s)