Lucene search
Japan Vulnerability NotesJVN:38163638HistoryJun 11, 2012 - 12:00 a.m.
JVN#38163638: Flash Player issue in implementations of the Same Origin Policy
2012-06-1100:00:00
Japan Vulnerability Notes
jvn.jp
15
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
49.6%
SoundMixer.computeSpectrum() method, included in Flash Player, contains an issue in implementations of the Same Origin Policy.
Impact
An attacker may obtain sound spectrum data that user playing in violation of the same-origin policy.
Solution
Update the Software
Update to the latest version according to the information provided by the developer.
Products Affected
- Adobe Flash Player 11.2.202.235 and earlier versions for Windows, Macintosh and Linux
- Adobe Flash Player 11.1.115.8 and earlier versions for Android 4.x
- Adobe Flash Player 11.1.111.9 and earlier versions for Android 3.x and 2.x
Related
prion
prion
Design/Logic Flaw
2012-06-09 00:55:00
ubuntucve
ubuntucve
CVE-2012-2038
2012-06-09 00:00:00
cvelist
cvelist
CVE-2012-2038
2012-06-09 00:00:00
nvd
nvd
CVE-2012-2038
2012-06-09 00:55:01
cve
cve
CVE-2012-2038
2012-06-09 00:55:01
checkpoint_advisories
checkpoint_advisories
nessus
nessus
Adobe AIR for Mac 3.x <= 3.2.0.2070 Multiple Vulnerabilities (APSB12-14)
2012-06-09 00:00:00
RHEL 5 / 6 : flash-plugin (RHSA-2012:0722)
2012-06-13 00:00:00
Adobe AIR 3.x <= 3.2.0.2070 Multiple Vulnerabilities (APSB12-14)
2012-06-09 00:00:00
redhat
redhat
(RHSA-2012:0722) Critical: flash-plugin security update
2012-06-12 00:00:00
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities June-2012 (Windows)
2012-06-20 00:00:00
FreeBSD Ports: linux-f10-flashplugin
2012-08-10 00:00:00
SuSE Update for flash-player openSUSE-SU-2012:0723-1 (flash-player)
2012-12-13 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2012-06-08 00:00:00
linux-flashplugin -- multiple vulnerabilities
2012-10-08 00:00:00
suse
suse
Security update for flash-player (critical)
2012-06-11 20:08:29
flash-player: Update to 11.2.202.236 security release (critical)
2012-06-11 16:08:38
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2012-06-23 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
49.6%
Related for JVN:38163638