Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-4175.

The remote Mac OS X host contains a version of Adobe Shockwave Player that is equal to or prior than 11.6.7.637. It is, therefore, affected by the following vulnerabilities :

  - Several unspecified errors exist that can lead to     buffer overflow vulnerabilities and possible code     execution. (CVE-2012-4172, CVE-2012-4173, CVE-2012-4174,     CVE-2012-4175, CVE-2012-5273)

  - An array out-of-bounds error exists that allows code     execution. (CVE-2012-4176)

A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulting in arbitrary code execution.

The remote Windows host contains a version of Adobe's Shockwave Player that is equal to or earlier than 11.6.7.637 and is, therefore, potentially affected by the following vulnerabilities :

  - Several unspecified errors exist that can lead to     buffer overflow vulnerabilities and possible code     execution. (CVE-2012-4172, CVE-2012-4173, CVE-2012-4174,     CVE-2012-4175, CVE-2012-5273)

  - An array out-of-bounds error exists that can lead to     code execution. (CVE-2012-4176)

A remote attacker could exploit these issues by tricking a user into viewing a malicious Shockwave file, resulting in arbitrary code execution.

The remote host has Adobe Flash Player installed. 

Versions of Flash Player earlier than 11.4.402.278 is affected by multiple vulnerabilities:

  - Several unspecified issues exist that can lead to buffer overflows and arbitrary code execution. (CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5257, CVE-2012-5259, CVE-2012-5260, CVE-2012-5262, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5285, CVE-2012-5286, CVE-2012-5287)

  - Several unspecified issues exist that can lead to memory corruption and arbitrary code execution. (CVE-2012-5252, CVE-2012-5256, CVE-2012-5258, CVE-2012-5261, CVE-2012-5263, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272)

  - An unspecified issue exists having unspecified impact. (CVE-2012-5673)


Versions of Flash Player earlier than 11.4.402.278 is affected by multiple vulnerabilities:

  - Several unspecified issues exist that can lead to buffer overflows and arbitrary code execution. (CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5257, CVE-2012-5259, CVE-2012-5260, CVE-2012-5262, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5285, CVE-2012-5286, CVE-2012-5287)
  - Several unspecified issues exist that can lead to memory corruption and arbitrary code execution. (CVE-2012-5252, CVE-2012-5256, CVE-2012-5258, CVE-2012-5261, CVE-2012-5263, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272)
  - An unspecified issue exists having unspecified impact. (CVE-2012-5673)


ID	Name	Product	Family	Severity
80182	Adobe Shockwave Player <= 11.6.7.637 Multiple Vulnerabilities (APSB12-23) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
62702	Shockwave Player <= 11.6.7.637 Multiple Vulnerabilities (APSB12-23)	Nessus	Windows	critical
6599	Flash Player <= 11.4.402.278 Multiple Vulnerabilities (APSB12-22)	Nessus Network Monitor	Web Clients	high
6598	Flash Player <= 11.4.402.278 Multiple Vulnerabilities (APSB12-22)	Nessus Network Monitor	Web Clients	high

Detections

Analytics

CVE-2012-5273

critical

Tenable Plugins

critical

critical

high

high