Lucene search
AdobeCVE-2012-0772HistoryMar 28, 2012 - 7:55 p.m.
CVE-2012-0772
2012-03-2819:55:00
CWE-119
adobe
web.nvd.nist.gov
110
adobe flash player
air
activex control
remote attackers
arbitrary code
denial of service
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.044
Percentile
92.4%
An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not properly perform URL security domain checking, which allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors.
Affected configurations
Node
adobeflash_playerRange≤10.3.183.16
ORadobeflash_playerMatch2
ORadobeflash_playerMatch3
ORadobeflash_playerMatch4
ORadobeflash_playerMatch5
ORadobeflash_playerMatch6
ORadobeflash_playerMatch6.0.21.0
ORadobeflash_playerMatch6.0.79
ORadobeflash_playerMatch7.0
ORadobeflash_playerMatch7.0.1
ORadobeflash_playerMatch7.0.14.0
ORadobeflash_playerMatch7.0.19.0
ORadobeflash_playerMatch7.0.24.0
ORadobeflash_playerMatch7.0.25
ORadobeflash_playerMatch7.0.53.0
ORadobeflash_playerMatch7.0.60.0
ORadobeflash_playerMatch7.0.61.0
ORadobeflash_playerMatch7.0.63
ORadobeflash_playerMatch7.0.66.0
ORadobeflash_playerMatch7.0.67.0
ORadobeflash_playerMatch7.0.68.0
ORadobeflash_playerMatch7.0.69.0
ORadobeflash_playerMatch7.0.70.0
ORadobeflash_playerMatch7.0.73.0
ORadobeflash_playerMatch7.1
ORadobeflash_playerMatch7.1.1
ORadobeflash_playerMatch7.2
ORadobeflash_playerMatch8.0
ORadobeflash_playerMatch8.0.22.0
ORadobeflash_playerMatch8.0.24.0
ORadobeflash_playerMatch8.0.33.0
ORadobeflash_playerMatch8.0.34.0
ORadobeflash_playerMatch8.0.35.0
ORadobeflash_playerMatch8.0.39.0
ORadobeflash_playerMatch8.0.42.0
ORadobeflash_playerMatch9.0
ORadobeflash_playerMatch9.0.9.0
ORadobeflash_playerMatch9.0.16
ORadobeflash_playerMatch9.0.18d60
ORadobeflash_playerMatch9.0.20
ORadobeflash_playerMatch9.0.20.0
ORadobeflash_playerMatch9.0.28
ORadobeflash_playerMatch9.0.28.0
ORadobeflash_playerMatch9.0.31
ORadobeflash_playerMatch9.0.31.0
ORadobeflash_playerMatch9.0.45.0
ORadobeflash_playerMatch9.0.47.0
ORadobeflash_playerMatch9.0.48.0
ORadobeflash_playerMatch9.0.112.0
ORadobeflash_playerMatch9.0.114.0
ORadobeflash_playerMatch9.0.115.0
ORadobeflash_playerMatch9.0.124.0
ORadobeflash_playerMatch9.0.125.0
ORadobeflash_playerMatch9.0.151.0
ORadobeflash_playerMatch9.0.152.0
ORadobeflash_playerMatch9.0.155.0
ORadobeflash_playerMatch9.0.159.0
ORadobeflash_playerMatch9.0.246.0
ORadobeflash_playerMatch9.0.260.0
ORadobeflash_playerMatch9.0.262.0
ORadobeflash_playerMatch9.0.277.0
ORadobeflash_playerMatch9.0.280
ORadobeflash_playerMatch9.0.283.0
ORadobeflash_playerMatch9.125.0
ORadobeflash_playerMatch10
ORadobeflash_playerMatch10.0.0.584
ORadobeflash_playerMatch10.0.12.10
ORadobeflash_playerMatch10.0.12.36
ORadobeflash_playerMatch10.0.15.3
ORadobeflash_playerMatch10.0.22.87
ORadobeflash_playerMatch10.0.32.18
ORadobeflash_playerMatch10.0.42.34
ORadobeflash_playerMatch10.0.45.2
ORadobeflash_playerMatch10.1
ORadobeflash_playerMatch10.1.52.14.1
ORadobeflash_playerMatch10.1.52.15
ORadobeflash_playerMatch10.1.53.64
ORadobeflash_playerMatch10.1.82.76
ORadobeflash_playerMatch10.1.85.3
ORadobeflash_playerMatch10.1.92.8
ORadobeflash_playerMatch10.1.92.10
ORadobeflash_playerMatch10.1.95.1
ORadobeflash_playerMatch10.1.95.2
ORadobeflash_playerMatch10.1.102.64
ORadobeflash_playerMatch10.1.105.6
ORadobeflash_playerMatch10.1.106.16
ORadobeflash_playerMatch10.2.152
ORadobeflash_playerMatch10.2.152.26
ORadobeflash_playerMatch10.2.152.32
ORadobeflash_playerMatch10.2.152.33
ORadobeflash_playerMatch10.2.153.1
ORadobeflash_playerMatch10.2.154.13
ORadobeflash_playerMatch10.2.154.25
ORadobeflash_playerMatch10.2.156.12
ORadobeflash_playerMatch10.2.157.51
ORadobeflash_playerMatch10.2.159.1
ORadobeflash_playerMatch10.3.181.14
ORadobeflash_playerMatch10.3.181.16
ORadobeflash_playerMatch10.3.181.22
ORadobeflash_playerMatch10.3.181.26
ORadobeflash_playerMatch10.3.181.34
ORadobeflash_playerMatch10.3.183.5
ORadobeflash_playerMatch10.3.183.7
ORadobeflash_playerMatch10.3.183.10
ORadobeflash_playerMatch10.3.183.11
ORadobeflash_playerMatch10.3.183.15
microsoftwindows
Node
adobeflash_playerMatch11.0
ORadobeflash_playerMatch11.0.1.152
ORadobeflash_playerMatch11.0.1.153
ORadobeflash_playerMatch11.1
ORadobeflash_playerMatch11.1.102.55
ORadobeflash_playerMatch11.1.102.62
ORadobeflash_playerMatch11.1.102.63
microsoftwindows
Node
adobeadobe_airRange≤3.1.0.488
ORadobeadobe_airMatch1.0
ORadobeadobe_airMatch1.0.1
ORadobeadobe_airMatch1.1
ORadobeadobe_airMatch1.5
ORadobeadobe_airMatch1.5.1
ORadobeadobe_airMatch1.5.2
ORadobeadobe_airMatch1.5.3
ORadobeadobe_airMatch1.5.3.9120
ORadobeadobe_airMatch2.0.2
ORadobeadobe_airMatch2.0.3
ORadobeadobe_airMatch2.0.3.13070
ORadobeadobe_airMatch2.0.4
ORadobeadobe_airMatch2.6
ORadobeadobe_airMatch2.7
ORadobeadobe_airMatch2.7.0.1948
ORadobeadobe_airMatch2.7.0.1953
ORadobeadobe_airMatch2.7.1
ORadobeadobe_airMatch2.7.1.19610
ORadobeadobe_airMatch3.0.0.408
ORadobeadobe_airMatch3.1.0.485
microsoftwindows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | flash_player | 10.3.181.22 | cpe:/a:adobe:flash_player:10.3.181.22::: |
| adobe | flash_player | 10.3.183.5 | cpe:/a:adobe:flash_player:10.3.183.5::: |
| adobe | flash_player | 7.0.69.0 | cpe:/a:adobe:flash_player:7.0.69.0::: |
| adobe | flash_player | 9.0.45.0 | cpe:/a:adobe:flash_player:9.0.45.0::: |
| adobe | flash_player | 7.2 | cpe:/a:adobe:flash_player:7.2::: |
| adobe | flash_player | 10.3.181.14 | cpe:/a:adobe:flash_player:10.3.181.14::: |
| adobe | flash_player | 7.0.63 | cpe:/a:adobe:flash_player:7.0.63::: |
| adobe | flash_player | 6 | cpe:/a:adobe:flash_player:6::: |
| adobe | flash_player | 8.0.34.0 | cpe:/a:adobe:flash_player:8.0.34.0::: |
| adobe | flash_player | 7.1 | cpe:/a:adobe:flash_player:7.1::: |
References
osvdb.org/80706
secunia.com/advisories/48618
www.adobe.com/support/security/bulletins/apsb12-07.html
www.securitytracker.com/id?1026859
www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15266
Related
prion
prion
Memory corruption
2012-03-28 19:55:00
checkpoint_advisories
checkpoint_advisories
ubuntucve
ubuntucve
CVE-2012-0772
2012-03-28 00:00:00
nvd
nvd
CVE-2012-0772
2012-03-28 19:55:00
cvelist
cvelist
CVE-2012-0772
2012-03-28 19:00:00
nessus
nessus
seebug
seebug
Adobe Flash Player 11.x多个内存破坏漏洞
2012-03-29 00:00:00
openvas
openvas
Adobe Flash Player Code Execution and DoS Vulnerabilities - Windows
2012-03-30 00:00:00
Adobe Flash Player Code Execution and DoS Vulnerabilities - Mac OS X
2012-03-30 00:00:00
Adobe Air Code Execution and DoS Vulnerabilities - Mac OS X
2013-08-26 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2012-04-22 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2012-04-05 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.044
Percentile
92.4%
Related for CVE-2012-0772