CVE-2012-0773
HIGH severity · CVSS 9.3 · Out-of-bounds write
9.3CVSS HIGH
Summary
The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)5%
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected products we track (4)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: http://www.adobe.com/support/security/bulletins/apsb12-07.html ↗
Additional information
- NVD record
- http://www.adobe.com/support/security/bulletins/apsb12-07.htmlPatch
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00018.html
- http://secunia.com/advisories/48618
- http://secunia.com/advisories/48652
- http://secunia.com/advisories/48819
- http://security.gentoo.org/glsa/glsa-201204-07.xmlAdvisory
- http://www.securitytracker.com/id?1026859Advisory