CVE-2012-0772

Adobe Flash Player <10.3.183.18 & <11.2.202.228 - Memory Corruption

Title source: llm
STIX 2.1

Description

An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not properly perform URL security domain checking, which allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors.

References (6)

Core 6
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.adobe.com/support/security/bulletins/apsb12-07.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15266
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48618
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/80706
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026859

Scores

EPSS 0.0590
EPSS Percentile 92.4%

Details

CWE
CWE-119
Status published
Products (50)
adobe/adobe_air 1.0
adobe/adobe_air 1.0.1
adobe/adobe_air 1.1
adobe/adobe_air 1.5
adobe/adobe_air 1.5.1
adobe/adobe_air 1.5.2
adobe/adobe_air 1.5.3
adobe/adobe_air 1.5.3.9120
adobe/adobe_air 2.0.2
adobe/adobe_air 2.0.3
... and 40 more
Published Mar 28, 2012
Tracked Since Feb 18, 2026