Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Adobe reports :

These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system.

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal to or earlier than 11.4.402.264, or 10.x equal to or earlier than 10.3.183.23.  It is, therefore, potentially affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5248,     CVE-2012-5249, CVE-2012-5250, CVE-2012-5251,     CVE-2012-5253, CVE-2012-5254, CVE-2012-5255,     CVE-2012-5257, CVE-2012-5259, CVE-2012-5260,     CVE-2012-5262, CVE-2012-5264, CVE-2012-5265,     CVE-2012-5266, CVE-2012-5285, CVE-2012-5286,     CVE-2012-5287)

  - Several unspecified issues exist that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5252,     CVE-2012-5256, CVE-2012-5258, CVE-2012-5261,     CVE-2012-5263, CVE-2012-5267, CVE-2012-5268,     CVE-2012-5269, CVE-2012-5270, CVE-2012-5271,     CVE-2012-5272)

  - An unspecified issue exists having unspecified impact.
    (CVE-2012-5673)

According to its version, the instance of Adobe AIR on the remote Mac OS X host is 3.4.0.2540 or earlier.  It is, therefore, reportedly affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5248,     CVE-2012-5249, CVE-2012-5250, CVE-2012-5251,     CVE-2012-5253, CVE-2012-5254, CVE-2012-5255,     CVE-2012-5257, CVE-2012-5259, CVE-2012-5260,     CVE-2012-5262, CVE-2012-5264, CVE-2012-5265,     CVE-2012-5266, CVE-2012-5285, CVE-2012-5286,     CVE-2012-5287)

  - Several unspecified issues exist that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5252,     CVE-2012-5256, CVE-2012-5258, CVE-2012-5261,     CVE-2012-5263, CVE-2012-5267, CVE-2012-5268,     CVE-2012-5269, CVE-2012-5270, CVE-2012-5271,     CVE-2012-5272)

  - An unspecified issue exists having unspecified impact.
    (CVE-2012-5673)

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal to or earlier than 11.4.402.278, or 10.x equal to or earlier than 10.3.183.23.  It is, therefore, potentially affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5248,     CVE-2012-5249, CVE-2012-5250, CVE-2012-5251,     CVE-2012-5253, CVE-2012-5254, CVE-2012-5255,     CVE-2012-5257, CVE-2012-5259, CVE-2012-5260,     CVE-2012-5262, CVE-2012-5264, CVE-2012-5265,     CVE-2012-5266, CVE-2012-5285, CVE-2012-5286,     CVE-2012-5287)

  - Several unspecified issues exist that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5252,     CVE-2012-5256, CVE-2012-5258, CVE-2012-5261,     CVE-2012-5263, CVE-2012-5267, CVE-2012-5268,     CVE-2012-5269, CVE-2012-5270, CVE-2012-5271,     CVE-2012-5272)

  - An unspecified issue exists having unspecified impact.
    (CVE-2012-5673)

According to its version, the instance of Adobe AIR on the remote Windows host is 3.4.0.2540 or earlier.  It is, therefore, reportedly affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5248,     CVE-2012-5249, CVE-2012-5250, CVE-2012-5251,     CVE-2012-5253, CVE-2012-5254, CVE-2012-5255,     CVE-2012-5257, CVE-2012-5259, CVE-2012-5260,     CVE-2012-5262, CVE-2012-5264, CVE-2012-5265,     CVE-2012-5266, CVE-2012-5285, CVE-2012-5286,     CVE-2012-5287)

  - Several unspecified issues exist that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5252,     CVE-2012-5256, CVE-2012-5258, CVE-2012-5261,     CVE-2012-5263, CVE-2012-5267, CVE-2012-5268,     CVE-2012-5269, CVE-2012-5270, CVE-2012-5271,     CVE-2012-5272)

  - An unspecified issue exists having unspecified impact.
    (CVE-2012-5673)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1346 advisory.

    The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash     Player web browser plug-in.

    This update fixes several vulnerabilities in Adobe Flash Player. These     vulnerabilities are detailed on the Adobe security page APSB12-22, listed     in the References section. Specially-crafted SWF content could cause     flash-plugin to crash or, potentially, execute arbitrary code when a victim     loads a page containing the malicious SWF content. (CVE-2012-5248,     CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253,     CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258,     CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263,     CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268,     CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272)

    All users of Adobe Flash Player should install this updated package, which     upgrades Flash Player to version 11.2.202.243.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is missing KB2758994.  It may, therefore, be affected by the following vulnerabilities related to the installed version of the Adobe Flash ActiveX control :

  - Multiple memory corruption errors exist that     could lead to code execution. (CVE-2012-5248,     CVE-2012-5249, CVE-2012-5250, CVE-2012-5251,     CVE-2012-5252, CVE-2012-5256, CVE-2012-5258,     CVE-2012-5261, CVE-2012-5263, CVE-2012-5267,     CVE-2012-5268, CVE-2012-5269, CVE-2012-5270,     CVE-2012-5271, CVE-2012-5272)

  - Multiple buffer overflow errors exist that     could lead to code execution. (CVE-2012-5248,     CVE-2012-5249, CVE-2012-5250, CVE-2012-5251,     CVE-2012-5253, CVE-2012-5254, CVE-2012-5255,     CVE-2012-5257, CVE-2012-5259, CVE-2012-5260,     CVE-2012-5262, CVE-2012-5264, CVE-2012-5265,     CVE-2012-5266, CVE-2012-5285, CVE-2012-5286,     CVE-2012-5287)

  - An unspecified issue exists having unspecified impact.
    (CVE-2012-5673)

The remote host has Adobe Flash Player installed. 

Versions of Flash Player earlier than 11.4.402.278 is affected by multiple vulnerabilities:

  - Several unspecified issues exist that can lead to buffer overflows and arbitrary code execution. (CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5257, CVE-2012-5259, CVE-2012-5260, CVE-2012-5262, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5285, CVE-2012-5286, CVE-2012-5287)

  - Several unspecified issues exist that can lead to memory corruption and arbitrary code execution. (CVE-2012-5252, CVE-2012-5256, CVE-2012-5258, CVE-2012-5261, CVE-2012-5263, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272)

  - An unspecified issue exists having unspecified impact. (CVE-2012-5673)


Versions of Flash Player earlier than 11.4.402.278 is affected by multiple vulnerabilities:

  - Several unspecified issues exist that can lead to buffer overflows and arbitrary code execution. (CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5257, CVE-2012-5259, CVE-2012-5260, CVE-2012-5262, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5285, CVE-2012-5286, CVE-2012-5287)
  - Several unspecified issues exist that can lead to memory corruption and arbitrary code execution. (CVE-2012-5252, CVE-2012-5256, CVE-2012-5258, CVE-2012-5261, CVE-2012-5263, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272)
  - An unspecified issue exists having unspecified impact. (CVE-2012-5673)


ID	Name	Product	Family	Severity
62814	FreeBSD : linux-flashplugin -- multiple vulnerabilities (36533a59-2770-11e2-bb44-003067b2972c)	Nessus	FreeBSD Local Security Checks	critical
62482	Flash Player for Mac <= 10.3.183.23 / 11.4.402.265 Multiple Vulnerabilities (APSB12-22)	Nessus	MacOS X Local Security Checks	critical
62481	Adobe AIR for Mac 3.x <= 3.4.0.2540 Multiple Vulnerabilities (APSB12-22)	Nessus	MacOS X Local Security Checks	critical
62480	Flash Player <= 10.3.183.23 / 11.4.402.278 Multiple Vulnerabilities (APSB12-22)	Nessus	Windows	critical
62479	Adobe AIR 3.x <= 3.4.0.2540 Multiple Vulnerabilities (APSB12-22)	Nessus	Windows	critical
62471	RHEL 5 / 6 : flash-plugin (RHSA-2012:1346)	Nessus	Red Hat Local Security Checks	critical
62467	MS KB2758994: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10	Nessus	Windows	critical
6599	Flash Player <= 11.4.402.278 Multiple Vulnerabilities (APSB12-22)	Nessus Network Monitor	Web Clients	high
6598	Flash Player <= 11.4.402.278 Multiple Vulnerabilities (APSB12-22)	Nessus Network Monitor	Web Clients	high

Detections

Analytics

CVE-2012-5287

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

high

high