The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

The remote Solaris system is missing necessary patches to address security updates :

  - Adobe Flash Player before 11.2.202.229 in Google Chrome     before 18.0.1025.151 allow attackers to cause a denial     of service (memory corruption) or possibly have     unspecified other impact via unknown vectors, a     different vulnerability than CVE-2012-0725.
    (CVE-2012-0724)

  - Adobe Flash Player before 11.2.202.229 in Google Chrome     before 18.0.1025.151 allow attackers to cause a denial     of service (memory corruption) or possibly have     unspecified other impact via unknown vectors, a     different vulnerability than CVE-2012-0724.
    (CVE-2012-0725)

  - The Matrix3D component in Adobe Flash Player before     10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac     OS X, Linux, and Solaris; before 11.1.111.7 on Android     2.x and 3.x; and before 11.1.115.7 on Android 4.x allows     attackers to execute arbitrary code or cause a denial of     service (memory corruption) via unspecified vectors.
    (CVE-2012-0768)

  - Adobe Flash Player before 10.3.183.16 and 11.x before     11.1.102.63 on Windows, Mac OS X, Linux, and Solaris;
    before 11.1.111.7 on Android 2.x and 3.x; and before     11.1.115.7 on Android 4.x does not properly handle     integers, which allows attackers to obtain sensitive     information via unspecified vectors. (CVE-2012-0769)

  - An unspecified ActiveX control in Adobe Flash Player     before 10.3.183.18 and 11.x before 11.2.202.228, and AIR     before 3.2.0.2070, on Windows does not properly perform     URL security domain checking, which allow attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via unknown vectors. (CVE-2012-0772)

  - The NetStream class in Adobe Flash Player before     10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac     OS X, and Linux; Flash Player before 10.3.183.18 and     11.x before 11.2.202.223 on Solaris; Flash Player before     11.1.111.8 on Android 2.x and 3.x; and AIR before     3.2.0.2070 allows attackers to execute arbitrary code or     cause a denial of service (memory corruption) via     unspecified vectors. (CVE-2012-0773)

flash-player 11.1.102.63 fixes two security issues :

  - memory corruption vulnerability in Matrix3D could lead     to code executionn (CVE-2012-0768)

  - integer errors that could lead to information disclosure     (CVE-2012-0769)

The remote host has Adobe Flash Player installed. 

Versions of Flash Player 10.x equal to or earlier than 10.3.183.15 or 11.x equal to or ealier than 11.1.102.62 are potentially affected by several vulnerabilities : 

  - A memory corruption vulnerability exists in Matrix3D that could lead to code execution. (CVE-2012-0768)

  - Multiple integer errors exist that could lead to information disclosure. (CVE-2012-0769)

The remote host is affected by the vulnerability described in GLSA-201204-07 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF       file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to bypass intended access restrictions,       bypass cross-domain policy, inject arbitrary web script, or obtain       sensitive information.
  Workaround :

    There is no known workaround at this time.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.3 or 9.5.1. It is, therefore, affected by the following vulnerabilities :

  - An integer overflow condition exists that allows an     attacker to execute arbitrary code via a crafted True     Type Font (TFF). (CVE-2012-0774)

  - A memory corruption issue exists in JavaScript handling     that allows an attacker to execute arbitrary code.
    (CVE-2012-0775)

  - A security bypass vulnerability exists in the Adobe     Reader installer that allows an attacker to execute     arbitrary code. (CVE-2012-0776)

  - A memory corruption issue exists in the JavaScript API     that allows an attacker to execute arbitrary code or     cause a denial of service. (CVE-2012-0777)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system.

flash-player 11.1.102.63 fixes two security issues :

  - memory corruption vulnerability in Matrix3D could lead     to code executionn. (CVE-2012-0768)

  - integer errors that could lead to information     disclosure. (CVE-2012-0769)

flash-player 11.1.102.63 fixes two security issues :

  - memory corruption vulnerability in Matrix3D could lead     to code executionn. (CVE-2012-0768)

  - integer errors that could lead to information disclosure     (CVE-2012-0769)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0359 advisory.

    The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash     Player web browser plug-in.

    This update fixes two vulnerabilities in Adobe Flash Player. These     vulnerabilities are detailed on the Adobe security page APSB12-05, listed     in the References section.

    A flaw was found in the way flash-plugin displayed certain SWF content. An     attacker could use this flaw to create a specially-crafted SWF file that     would cause flash-plugin to crash or, potentially, execute arbitrary code     when the victim loaded a page containing the specially-crafted SWF content.
    (CVE-2012-0768)

    A flaw in flash-plugin could allow an attacker to obtain sensitive     information if a victim were tricked into visiting a specially-crafted web     page. (CVE-2012-0769)

    All users of Adobe Flash Player should install this updated package, which     upgrades Flash Player to version 10.3.183.16.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal to or earlier than 10.3.183.15 or 11.x equal to or earlier than 11.1.102.62.  It is, therefore, reportedly affected by several critical vulnerabilities :

  - A memory corruption vulnerability exists in Matrix3D     that could lead to code execution. (CVE-2012-0768)

  - Multiple integer errors exist that could lead to     information disclosure. (CVE-2012-0769)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal to or earlier than 10.3.183.15 or 11.x equal to or earlier than 11.1.102.62.  It is, therefore, reportedly affected by several critical vulnerabilities :

  - A memory corruption vulnerability exists in Matrix3D     that could lead to code execution. (CVE-2012-0768)

  - Multiple integer errors exist that could lead to     information disclosure. (CVE-2012-0769)

ID	Name	Product	Family	Severity
80612	Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer6)	Nessus	Solaris Local Security Checks	critical
75842	openSUSE Security Update : flash-player (openSUSE-SU-2012:0331-1)	Nessus	SuSE Local Security Checks	critical
74564	openSUSE Security Update : flash-player (openSUSE-SU-2012:0349-1)	Nessus	SuSE Local Security Checks	critical
6803	Flash Player <= 10.3.183.15 / 11.1.102.62 Multiple Vulnerabilities (APSB12-05)	Nessus Network Monitor	Web Clients	high
59623	GLSA-201204-07 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
58684	Adobe Reader < 10.1.3 / 9.5.1 Multiple Vulnerabilities (APSB12-03, APSB12-05, APSB12-07, APSB12-08) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
58315	FreeBSD : linux-flashplugin -- multiple vulnerabilities (9da3834b-6a50-11e1-91af-003067b2972c)	Nessus	FreeBSD Local Security Checks	critical
58300	SuSE 10 Security Update : flash-player (ZYPP Patch Number 8006)	Nessus	SuSE Local Security Checks	critical
58286	SuSE 11.1 Security Update : flash-player (SAT Patch Number 5928)	Nessus	SuSE Local Security Checks	critical
58262	RHEL 5 / 6 : flash-plugin (RHSA-2012:0359)	Nessus	Red Hat Local Security Checks	critical
58208	Flash Player for Mac <= 10.3.183.15 / 11.1.102.62 Multiple Vulnerabilities (APSB12-05)	Nessus	MacOS X Local Security Checks	high
58207	Flash Player <= 10.3.183.15 / 11.1.102.62 Multiple Vulnerabilities (APSB12-05)	Nessus	Windows	high

Detections

Analytics

CVE-2012-0768

critical

Tenable Plugins

critical

critical

critical

high

critical

critical

critical

critical

critical

critical

high

high