The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

The remote Solaris system is missing necessary patches to address security updates :

  - Adobe Flash Player before 11.2.202.229 in Google Chrome     before 18.0.1025.151 allow attackers to cause a denial     of service (memory corruption) or possibly have     unspecified other impact via unknown vectors, a     different vulnerability than CVE-2012-0725.
    (CVE-2012-0724)

  - Adobe Flash Player before 11.2.202.229 in Google Chrome     before 18.0.1025.151 allow attackers to cause a denial     of service (memory corruption) or possibly have     unspecified other impact via unknown vectors, a     different vulnerability than CVE-2012-0724.
    (CVE-2012-0725)

  - The Matrix3D component in Adobe Flash Player before     10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac     OS X, Linux, and Solaris; before 11.1.111.7 on Android     2.x and 3.x; and before 11.1.115.7 on Android 4.x allows     attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors.
    (CVE-2012-0768)

  - Adobe Flash Player before 10.3.183.16 and 11.x before     11.1.102.63 on Windows, Mac OS X, Linux, and Solaris;
    before 11.1.111.7 on Android 2.x and 3.x; and before     11.1.115.7 on Android 4.x does not properly handle     integers, which allows attackers to obtain sensitive     information via unspecified vectors. (CVE-2012-0769)

  - An unspecified ActiveX control in Adobe Flash Player     before 10.3.183.18 and 11.x before 11.2.202.228, and AIR     before 3.2.0.2070, on Windows does not properly perform     URL security domain checking, which allow attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via unknown vectors. (CVE-2012-0772)

  - The NetStream class in Adobe Flash Player before     10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac     OS X, and Linux; Flash Player before 10.3.183.18 and     11.x before 11.2.202.223 on Solaris; Flash Player before     11.1.111.8 on Android 2.x and 3.x; and AIR before     3.2.0.2070 allows attackers to execute arbitrary code or     cause a denial of service (memory corruption) via     unspecified vectors. (CVE-2012-0773)

Adobe Flash Player 11.1.102.63 fixes a memory corruption vulnerability in the NetStream class that could lead to code execution

The remote host has Adobe Flash Player installed. 

Versions of Flash Player 10.x equal to or earlier than 10.3.183.16 or 11.x equal to or ealier than 11.1.102.63 are potentially affected by several critical memory corruption vulnerabilities : 

  - Memory corruption vulnerabilities related to URL security domain checking. (CVE-2012-0772)

  - A flaw in the NetStream Class that could lead to remote code execution. (CVE-2012-0773)

  - Two Flash Player memory corruption vulnerabilities related to the Google Chrome interface. (CVE-2012-0724, CVE-2012-0725)

By tricking a victim into visiting a specially crafted page, an attacker may be able to utilize these vulnerabilities to execute arbitrary code subject to the users' privileges

The remote host is affected by the vulnerability described in GLSA-201204-07 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF       file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to bypass intended access restrictions,       bypass cross-domain policy, inject arbitrary web script, or obtain       sensitive information.
  Workaround :

    There is no known workaround at this time.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.3 or 9.5.1. It is, therefore, affected by the following vulnerabilities :

  - An integer overflow condition exists that allows an     attacker to execute arbitrary code via a crafted True     Type Font (TFF). (CVE-2012-0774)

  - A memory corruption issue exists in JavaScript handling     that allows an attacker to execute arbitrary code.
    (CVE-2012-0775)

  - A security bypass vulnerability exists in the Adobe     Reader installer that allows an attacker to execute     arbitrary code. (CVE-2012-0776)

  - A memory corruption issue exists in the JavaScript API     that allows an attacker to execute arbitrary code or     cause a denial of service. (CVE-2012-0777)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Adobe reports :

Multiple Priority 2 vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system.

Adobe Flash Player 11.1.102.63 fixes a memory corruption vulnerability in the NetStream class that could have lead to code execution.
(CVE-2012-0773)

Versions of Google Chrome earlier than 18.0.1025.142 are potentially affected by the following vulnerabilities :

  - An error exists in the v8 JavaScript engine that can allow invalid reads. (CVE-2011-3057)

  - An unspecified error exists related to bad interaction and 'EUC-JP'.  This can lead to cross-site scripting attacks. (CVE-2011-3058)

  - Out-of-bounds read errors exist related to SVG text handling and text fragment handling. (CVE-2011-3059, CVE-2011-3060)

  - A certificate checking error exists related to the SPDY protocol. (CVE-2011-3061)

  - An off-by-one error exists in the 'OpenType Sanitizer'. (CVE-2011-3062)

  - Navigation requests from the renderer are not validated carefully enough. (CVE-2011-3063)

  - A use-after-free error exists related to SVG clipping. (CVE-2011-3064)

  - An unspecified memory corruption error exists related to 'Skia'. (CVE-2011-3065)

  - The bundled version of Adobe Flash Player contains errors related to ActiveX and the NetStream class.  These errors can allow memory corruption, denial of service via application crashes and possibly code execution. (CVE-2012-0772, CVE-2012-0773)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal to or earlier than 10.3.183.16 or 11.x equal to or earlier than 11.1.102.63.  It is, therefore, reportedly affected by several critical memory corruption vulnerabilities :

  - Memory corruption vulnerabilities related to URL     security domain checking. (CVE-2012-0772)

  - A flaw in the NetStream Class that could lead to remote     code execution. (CVE-2012-0773)

By tricking a victim into visiting a specially crafted page, an attacker may be able to utilize these vulnerabilities to execute arbitrary code subject to the users' privileges.

According to its version, the instance of Adobe AIR 3.x on the remote Mac OS X host is 3.1.0.4880 or earlier and is reportedly affected by several critical memory corruption vulnerabilities :

  - Memory corruption vulnerabilities related to URL     security domain checking. (CVE-2012-0772)

  - A flaw in the NetStream Class that could lead to remote     code execution. (CVE-2012-0773)

By tricking a victim into visiting a specially crafted page, an attacker may be able to utilize these vulnerabilities to execute arbitrary code subject to the users' privileges.

According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal to or earlier than 10.3.183.16 or 11.x equal to or earlier than 11.1.102.63.  It is, therefore, reportedly affected by several critical memory corruption vulnerabilities :

  - Memory corruption vulnerabilities related to URL     security domain checking. (CVE-2012-0772)

  - A flaw in the NetStream Class that could lead to remote     code execution. (CVE-2012-0773)

  - Two Flash Player memory corruption vulnerabilities     related to the Google Chrome interface.     (CVE-2012-0724, CVE-2012-0725)  

By tricking a victim into visiting a specially crafted page, an attacker may be able to utilize these vulnerabilities to execute arbitrary code subject to the users' privileges.

According to its version, the instance of Adobe AIR 3.x on the remote Windows host is 3.1.0.4880 or earlier and is reportedly affected by several critical memory corruption vulnerabilities :
 
  - Memory corruption vulnerabilities related to URL     security domain checking. (CVE-2012-0772)

  - A flaw in the NetStream Class that could lead to remote     code execution. (CVE-2012-0773)

By tricking a victim into visiting a specially crafted page, an attacker may be able to utilize these vulnerabilities to execute arbitrary code subject to the users' privileges.

The version of Google Chrome installed on the remote host is earlier than 18.0.1025.142 and is, therefore, affected by the following vulnerabilities :

  - An error exists in the v8 JavaScript engine that can     allow invalid reads. (CVE-2011-3057)

  - An unspecified error exists related to bad interaction     and 'EUC-JP'. This can lead to cross-site scripting     attacks. (CVE-2011-3058)

  - Out-of-bounds read errors exist related to SVG text     handling and text fragment handling. (CVE-2011-3059,     CVE-2011-3060)

  - A certificate checking error exists related to the     SPDY protocol. (CVE-2011-3061)

  - An off-by-one error exists in the 'OpenType Sanitizer'.
    (CVE-2011-3062)

  - Navigation requests from the renderer are not validated     carefully enough.(CVE-2011-3063)

  - A use-after-free error exists related to SVG clipping.
    (CVE-2011-3064)

  - An unspecified memory corruption error exists related     to 'Skia'. (CVE-2011-3065)

  - The bundled version of Adobe Flash Player contains     errors related to ActiveX and the NetStream class.
    These errors can allow memory corruption, denial of     service via application crashes and possibly code     execution. (CVE-2012-0772, CVE-2012-0773)

An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update fixes one vulnerability in Adobe Flash Player. This vulnerability is detailed on the Adobe security page APSB12-07, listed in the References section. Specially crafted SWF content could cause flash-plugin to crash or, potentially, execute arbitrary code when a victim loads a page containing the specially crafted SWF content.
(CVE-2012-0773)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 10.3.183.18.

ID	Name	Product	Family	Severity
80612	Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer6)	Nessus	Solaris Local Security Checks	critical
74582	openSUSE Security Update : flash-player (openSUSE-SU-2012:0427-1)	Nessus	SuSE Local Security Checks	critical
6802	Flash Player <= 10.3.183.16 / 11.1.102.63 Multiple Memory Corruption Vulnerabilities (APSB12-07)	Nessus Network Monitor	Web Clients	high
59623	GLSA-201204-07 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
58684	Adobe Reader < 10.1.3 / 9.5.1 Multiple Vulnerabilities (APSB12-03, APSB12-05, APSB12-07, APSB12-08) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
58646	FreeBSD : linux-flashplugin -- multiple vulnerabilities (20923a0d-82ba-11e1-8d7b-003067b2972c)	Nessus	FreeBSD Local Security Checks	critical
58561	SuSE 10 Security Update : flash-player (ZYPP Patch Number 8037)	Nessus	SuSE Local Security Checks	critical
58560	SuSE 11.1 Security Update : flash-player (SAT Patch Number 6059)	Nessus	SuSE Local Security Checks	critical
800957	Google Chrome < 18.0.1025.142 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
58540	Flash Player for Mac <= 10.3.183.16 / 11.1.102.63 Multiple Memory Corruption Vulnerabilities (APSB12-07)	Nessus	MacOS X Local Security Checks	critical
58539	Adobe AIR for Mac 3.x <= 3.1.0.4880 Multiple Memory Corruption Vulnerabilities (APSB12-07)	Nessus	MacOS X Local Security Checks	high
58538	Flash Player <= 10.3.183.16 / 11.1.102.63 Multiple Memory Corruption Vulnerabilities (APSB12-07)	Nessus	Windows	critical
58537	Adobe AIR 3.x <= 3.1.0.4880 Multiple Memory Corruption Vulnerabilities (APSB12-07)	Nessus	Windows	high
58536	Google Chrome < 18.0.1025.142 Multiple Vulnerabilities	Nessus	Windows	high
58523	RHEL 5 / 6 : flash-plugin (RHSA-2012:0434)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2012-0773

critical

Tenable Plugins

critical

critical

high

critical

critical

critical

critical

critical

high

critical

high

critical

high

high

critical