CVE-2012-0772: Buffer Overflow

First published: Wed Mar 28 2012(Updated: )

An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not properly perform URL security domain checking, which allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors.

Credit: psirt@adobe.com

Affected Software	Affected Version	How to fix
Adobe Flash Player	<=10.3.183.16
Adobe Flash Player	=2
Adobe Flash Player	=3
Adobe Flash Player	=4
Adobe Flash Player	=5
Adobe Flash Player	=6
Adobe Flash Player	=6.0.21.0
Adobe Flash Player	=6.0.79
Adobe Flash Player	=7.0
Adobe Flash Player	=7.0.1
Adobe Flash Player	=7.0.14.0
Adobe Flash Player	=7.0.19.0
Adobe Flash Player	=7.0.24.0
Adobe Flash Player	=7.0.25
Adobe Flash Player	=7.0.53.0
Adobe Flash Player	=7.0.60.0
Adobe Flash Player	=7.0.61.0
Adobe Flash Player	=7.0.63
Adobe Flash Player	=7.0.66.0
Adobe Flash Player	=7.0.67.0
Adobe Flash Player	=7.0.68.0
Adobe Flash Player	=7.0.69.0
Adobe Flash Player	=7.0.70.0
Adobe Flash Player	=7.0.73.0
Adobe Flash Player	=7.1
Adobe Flash Player	=7.1.1
Adobe Flash Player	=7.2
Adobe Flash Player	=8.0
Adobe Flash Player	=8.0.22.0
Adobe Flash Player	=8.0.24.0
Adobe Flash Player	=8.0.33.0
Adobe Flash Player	=8.0.34.0
Adobe Flash Player	=8.0.35.0
Adobe Flash Player	=8.0.39.0
Adobe Flash Player	=8.0.42.0
Adobe Flash Player	=9.0
Adobe Flash Player	=9.0.9.0
Adobe Flash Player	=9.0.16
Adobe Flash Player	=9.0.18d60
Adobe Flash Player	=9.0.20
Adobe Flash Player	=9.0.20.0
Adobe Flash Player	=9.0.28
Adobe Flash Player	=9.0.28.0
Adobe Flash Player	=9.0.31
Adobe Flash Player	=9.0.31.0
Adobe Flash Player	=9.0.45.0
Adobe Flash Player	=9.0.47.0
Adobe Flash Player	=9.0.48.0
Adobe Flash Player	=9.0.112.0
Adobe Flash Player	=9.0.114.0
Adobe Flash Player	=9.0.115.0
Adobe Flash Player	=9.0.124.0
Adobe Flash Player	=9.0.125.0
Adobe Flash Player	=9.0.151.0
Adobe Flash Player	=9.0.152.0
Adobe Flash Player	=9.0.155.0
Adobe Flash Player	=9.0.159.0
Adobe Flash Player	=9.0.246.0
Adobe Flash Player	=9.0.260.0
Adobe Flash Player	=9.0.262.0
Adobe Flash Player	=9.0.277.0
Adobe Flash Player	=9.0.280
Adobe Flash Player	=9.0.283.0
Adobe Flash Player	=9.125.0
Adobe Flash Player	=10
Adobe Flash Player	=10.0.0.584
Adobe Flash Player	=10.0.12.10
Adobe Flash Player	=10.0.12.36
Adobe Flash Player	=10.0.15.3
Adobe Flash Player	=10.0.22.87
Adobe Flash Player	=10.0.32.18
Adobe Flash Player	=10.0.42.34
Adobe Flash Player	=10.0.45.2
Adobe Flash Player	=10.1
Adobe Flash Player	=10.1.52.14.1
Adobe Flash Player	=10.1.52.15
Adobe Flash Player	=10.1.53.64
Adobe Flash Player	=10.1.82.76
Adobe Flash Player	=10.1.85.3
Adobe Flash Player	=10.1.92.8
Adobe Flash Player	=10.1.92.10
Adobe Flash Player	=10.1.95.1
Adobe Flash Player	=10.1.95.2
Adobe Flash Player	=10.1.102.64
Adobe Flash Player	=10.1.105.6
Adobe Flash Player	=10.1.106.16
Adobe Flash Player	=10.2.152
Adobe Flash Player	=10.2.152.26
Adobe Flash Player	=10.2.152.32
Adobe Flash Player	=10.2.152.33
Adobe Flash Player	=10.2.153.1
Adobe Flash Player	=10.2.154.13
Adobe Flash Player	=10.2.154.25
Adobe Flash Player	=10.2.156.12
Adobe Flash Player	=10.2.157.51
Adobe Flash Player	=10.2.159.1
Adobe Flash Player	=10.3.181.14
Adobe Flash Player	=10.3.181.16
Adobe Flash Player	=10.3.181.22
Adobe Flash Player	=10.3.181.26
Adobe Flash Player	=10.3.181.34
Adobe Flash Player	=10.3.183.5
Adobe Flash Player	=10.3.183.7
Adobe Flash Player	=10.3.183.10
Adobe Flash Player	=10.3.183.11
Adobe Flash Player	=10.3.183.15
Microsoft Windows
Adobe Flash Player	=11.0
Adobe Flash Player	=11.0.1.152
Adobe Flash Player	=11.0.1.153
Adobe Flash Player	=11.1
Adobe Flash Player	=11.1.102.55
Adobe Flash Player	=11.1.102.62
Adobe Flash Player	=11.1.102.63
Adobe Adobe Air	<=3.1.0.488
Adobe Adobe Air	=1.0
Adobe Adobe Air	=1.0.1
Adobe Adobe Air	=1.1
Adobe Adobe Air	=1.5
Adobe Adobe Air	=1.5.1
Adobe Adobe Air	=1.5.2
Adobe Adobe Air	=1.5.3
Adobe Adobe Air	=1.5.3.9120
Adobe Adobe Air	=2.0.2
Adobe Adobe Air	=2.0.3
Adobe Adobe Air	=2.0.3.13070
Adobe Adobe Air	=2.0.4
Adobe Adobe Air	=2.6
Adobe Adobe Air	=2.7
Adobe Adobe Air	=2.7.0.1948
Adobe Adobe Air	=2.7.0.1953
Adobe Adobe Air	=2.7.1
Adobe Adobe Air	=2.7.1.19610
Adobe Adobe Air	=3.0.0.408
Adobe Adobe Air	=3.1.0.485

Remedy

http://www.adobe.com/support/security/bulletins/apsb12-07.html

Never miss a vulnerability like this again

Reference Links

collector/nvd-index
agent/references
agent/author
agent/weakness
agent/severity
agent/type
agent/event
agent/softwarecombine
agent/first-publish-date
agent/last-modified-date
agent/description
agent/remedy
agent/tags
collector/mitre-cve
source/MITRE
vendor/adobe
canonical/adobe flash player
version/adobe flash player/10.3.183.16
version/adobe flash player/2
version/adobe flash player/3
version/adobe flash player/4
version/adobe flash player/5
version/adobe flash player/6
version/adobe flash player/6.0.21.0
version/adobe flash player/6.0.79
version/adobe flash player/7.0
version/adobe flash player/7.0.1
version/adobe flash player/7.0.14.0
version/adobe flash player/7.0.19.0
version/adobe flash player/7.0.24.0
version/adobe flash player/7.0.25
version/adobe flash player/7.0.53.0
version/adobe flash player/7.0.60.0
version/adobe flash player/7.0.61.0
version/adobe flash player/7.0.63
version/adobe flash player/7.0.66.0
version/adobe flash player/7.0.67.0
version/adobe flash player/7.0.68.0
version/adobe flash player/7.0.69.0
version/adobe flash player/7.0.70.0
version/adobe flash player/7.0.73.0
version/adobe flash player/7.1
version/adobe flash player/7.1.1
version/adobe flash player/7.2
version/adobe flash player/8.0
version/adobe flash player/8.0.22.0
version/adobe flash player/8.0.24.0
version/adobe flash player/8.0.33.0
version/adobe flash player/8.0.34.0
version/adobe flash player/8.0.35.0
version/adobe flash player/8.0.39.0
version/adobe flash player/8.0.42.0
version/adobe flash player/9.0
version/adobe flash player/9.0.9.0
version/adobe flash player/9.0.16
version/adobe flash player/9.0.18d60
version/adobe flash player/9.0.20
version/adobe flash player/9.0.20.0
version/adobe flash player/9.0.28
version/adobe flash player/9.0.28.0
version/adobe flash player/9.0.31
version/adobe flash player/9.0.31.0
version/adobe flash player/9.0.45.0
version/adobe flash player/9.0.47.0
version/adobe flash player/9.0.48.0
version/adobe flash player/9.0.112.0
version/adobe flash player/9.0.114.0
version/adobe flash player/9.0.115.0
version/adobe flash player/9.0.124.0
version/adobe flash player/9.0.125.0
version/adobe flash player/9.0.151.0
version/adobe flash player/9.0.152.0
version/adobe flash player/9.0.155.0
version/adobe flash player/9.0.159.0
version/adobe flash player/9.0.246.0
version/adobe flash player/9.0.260.0
version/adobe flash player/9.0.262.0
version/adobe flash player/9.0.277.0
version/adobe flash player/9.0.280
version/adobe flash player/9.0.283.0
version/adobe flash player/9.125.0
version/adobe flash player/10
version/adobe flash player/10.0.0.584
version/adobe flash player/10.0.12.10
version/adobe flash player/10.0.12.36
version/adobe flash player/10.0.15.3
version/adobe flash player/10.0.22.87
version/adobe flash player/10.0.32.18
version/adobe flash player/10.0.42.34
version/adobe flash player/10.0.45.2
version/adobe flash player/10.1
version/adobe flash player/10.1.52.14.1
version/adobe flash player/10.1.52.15
version/adobe flash player/10.1.53.64
version/adobe flash player/10.1.82.76
version/adobe flash player/10.1.85.3
version/adobe flash player/10.1.92.8
version/adobe flash player/10.1.92.10
version/adobe flash player/10.1.95.1
version/adobe flash player/10.1.95.2
version/adobe flash player/10.1.102.64
version/adobe flash player/10.1.105.6
version/adobe flash player/10.1.106.16
version/adobe flash player/10.2.152
version/adobe flash player/10.2.152.26
version/adobe flash player/10.2.152.32
version/adobe flash player/10.2.152.33
version/adobe flash player/10.2.153.1
version/adobe flash player/10.2.154.13
version/adobe flash player/10.2.154.25
version/adobe flash player/10.2.156.12
version/adobe flash player/10.2.157.51
version/adobe flash player/10.2.159.1
version/adobe flash player/10.3.181.14
version/adobe flash player/10.3.181.16
version/adobe flash player/10.3.181.22
version/adobe flash player/10.3.181.26
version/adobe flash player/10.3.181.34
version/adobe flash player/10.3.183.5
version/adobe flash player/10.3.183.7
version/adobe flash player/10.3.183.10
version/adobe flash player/10.3.183.11
version/adobe flash player/10.3.183.15
vendor/microsoft
canonical/microsoft windows
version/adobe flash player/11.0
version/adobe flash player/11.0.1.152
version/adobe flash player/11.0.1.153
version/adobe flash player/11.1
version/adobe flash player/11.1.102.55
version/adobe flash player/11.1.102.62
version/adobe flash player/11.1.102.63
canonical/adobe adobe air
version/adobe adobe air/3.1.0.488
version/adobe adobe air/1.0
version/adobe adobe air/1.0.1
version/adobe adobe air/1.1
version/adobe adobe air/1.5
version/adobe adobe air/1.5.1
version/adobe adobe air/1.5.2
version/adobe adobe air/1.5.3
version/adobe adobe air/1.5.3.9120
version/adobe adobe air/2.0.2
version/adobe adobe air/2.0.3
version/adobe adobe air/2.0.3.13070
version/adobe adobe air/2.0.4
version/adobe adobe air/2.6
version/adobe adobe air/2.7
version/adobe adobe air/2.7.0.1948
version/adobe adobe air/2.7.0.1953
version/adobe adobe air/2.7.1
version/adobe adobe air/2.7.1.19610
version/adobe adobe air/3.0.0.408
version/adobe adobe air/3.1.0.485

CVE-2012-0772: Buffer Overflow

Remedy

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact