CVE-2012-5258

09.10.2012, 11:13

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	10 UNKNOWN	NETWORK	LOW	AV:N/AC:L/Au:N/C:C/I:C/A:C
adobe	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 90%

Vendor	Product	Version
adobe	flash_player	𝑥 ≤ 10.3.183.25
adobe	flash_player	10.1.85.3
adobe	flash_player	10.1.102.64
adobe	flash_player	10.2.152.26
adobe	flash_player	10.2.152.32
adobe	flash_player	10.2.153.1
adobe	flash_player	10.2.159.1
adobe	flash_player	10.3.181.14
adobe	flash_player	10.3.181.16
adobe	flash_player	10.3.181.22
adobe	flash_player	10.3.181.26
adobe	flash_player	10.3.181.34
adobe	flash_player	10.3.183.5
adobe	flash_player	10.3.183.7
adobe	flash_player	10.3.183.10
adobe	flash_player	10.3.183.11
adobe	flash_player	10.3.183.15
adobe	flash_player	10.3.183.16
adobe	flash_player	10.3.183.18
adobe	flash_player	10.3.183.20
adobe	flash_player	10.3.183.23
adobe	flash_player	11.0.1.152
adobe	flash_player	11.1.102.55
adobe	flash_player	11.1.102.62
adobe	flash_player	11.1.102.63
adobe	flash_player	11.2.202.223
adobe	flash_player	11.2.202.228
adobe	flash_player	11.2.202.233
adobe	flash_player	11.2.202.235
adobe	flash_player	11.2.202.238
adobe	flash_player	11.2.202.243
adobe	flash_player	11.3.300.257
adobe	flash_player	11.3.300.262
adobe	flash_player	11.3.300.265
adobe	flash_player	11.3.300.268
adobe	flash_player	11.3.300.271
adobe	flash_player	11.3.300.273
adobe	flash_player	11.4.402.265
adobe	flash_player	11.4.402.278
adobe	flash_player	𝑥 ≤ 10.3.183.25
adobe	flash_player	10.1.85.3
adobe	flash_player	10.1.102.64
adobe	flash_player	10.2.152.26
adobe	flash_player	10.2.152.32
adobe	flash_player	10.2.153.1
adobe	flash_player	10.2.159.1
adobe	flash_player	10.3.181.14
adobe	flash_player	10.3.181.16
adobe	flash_player	10.3.181.22
adobe	flash_player	10.3.181.26
adobe	flash_player	10.3.181.34
adobe	flash_player	10.3.183.5
adobe	flash_player	10.3.183.7
adobe	flash_player	10.3.183.10
adobe	flash_player	10.3.183.11
adobe	flash_player	10.3.183.15
adobe	flash_player	10.3.183.16
adobe	flash_player	10.3.183.18
adobe	flash_player	10.3.183.20
adobe	flash_player	10.3.183.23
adobe	flash_player	11.0.1.152
adobe	flash_player	11.1.102.55
adobe	flash_player	11.1.102.62
adobe	flash_player	11.1.102.63
adobe	flash_player	11.2.202.223
adobe	flash_player	11.2.202.228
adobe	flash_player	11.2.202.233
adobe	flash_player	11.2.202.235
adobe	flash_player	11.2.202.238
adobe	flash_player_for_android	𝑥 ≤ 11.1.111.16
adobe	flash_player_for_android	10.1.106.17
adobe	flash_player_for_android	10.2.157.51
adobe	flash_player_for_android	10.3.186.7
adobe	flash_player_for_android	11.0.1.153
adobe	flash_player_for_android	11.1.102.59
adobe	flash_player_for_android	11.1.111.5
adobe	flash_player_for_android	11.1.111.7
adobe	flash_player_for_android	11.1.111.8
adobe	flash_player_for_android	11.1.111.9
adobe	flash_player_for_android	11.1.111.10
adobe	flash_player_for_android	𝑥 ≤ 11.1.115.17
adobe	flash_player_for_android	11.1.112.60
adobe	flash_player_for_android	11.1.112.61
adobe	flash_player_for_android	11.1.115.7
adobe	flash_player_for_android	11.1.115.8
adobe	flash_player_for_android	11.1.115.11
adobe	flash_player_for_android	11.1.115.12
adobe	adobe_air	𝑥 ≤ 3.4.0.2540
adobe	adobe_air	1.0
adobe	adobe_air	1.0.1
adobe	adobe_air	1.0.8.4990
adobe	adobe_air	1.0.4990
adobe	adobe_air	1.1
adobe	adobe_air	1.1.0.5790
adobe	adobe_air	1.5
adobe	adobe_air	1.5.0.7220
adobe	adobe_air	1.5.1
adobe	adobe_air	1.5.1.8210
adobe	adobe_air	1.5.2
adobe	adobe_air	1.5.3
adobe	adobe_air	1.5.3.9120
adobe	adobe_air	1.5.3.9130
adobe	adobe_air	2.0.2
adobe	adobe_air	2.0.2.12610
adobe	adobe_air	2.0.3
adobe	adobe_air	2.0.3.13070
adobe	adobe_air	2.0.4
adobe	adobe_air	2.5.0.16600
adobe	adobe_air	2.5.1.17730
adobe	adobe_air	2.6
adobe	adobe_air	2.6.0.19120
adobe	adobe_air	2.6.0.19140
adobe	adobe_air	2.7
adobe	adobe_air	2.7.0.1948
adobe	adobe_air	2.7.0.1953
adobe	adobe_air	2.7.0.19480
adobe	adobe_air	2.7.0.19530
adobe	adobe_air	2.7.1
adobe	adobe_air	2.7.1.19610
adobe	adobe_air	3.0.0.408
adobe	adobe_air	3.0.0.4080
adobe	adobe_air	3.1.0.485
adobe	adobe_air	3.1.0.488
adobe	adobe_air	3.1.0.4880
adobe	adobe_air	3.2.0.207
adobe	adobe_air	3.2.0.2070
adobe	adobe_air	3.3.0.3670
adobe	adobe_air_sdk	𝑥 ≤ 3.4.0.2540

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

adobe-flashplugin

precise	Fixed 11.2.202.243-0precise1 released
oneiric	Fixed 11.2.202.243-0oneiric1 released
natty	Fixed 11.2.202.243-0natty1 released
lucid	Fixed 11.2.202.243-0lucid1 released
hardy	ignored

flashplugin-nonfree

precise	Fixed 11.2.202.243ubuntu0.12.04.1 released
oneiric	Fixed 11.2.202.243ubuntu0.11.10.1 released
natty	Fixed 11.2.202.243ubuntu0.11.04.1 released
lucid	Fixed 11.2.202.243ubuntu0.10.04.1 released
hardy	ignored

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html

http://osvdb.org/86035

http://www.adobe.com/support/security/bulletins/apsb12-22.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/79079

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html

http://osvdb.org/86035

http://www.adobe.com/support/security/bulletins/apsb12-22.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/79079