CVE-2012-0773

Critical

Description

The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

SeverityCritical
CVSS9.3
Exploit probability—
ProductAdobe Flash Player
PublishedMar 28, 2012
First seenMar 28, 2012

How to fix

Update
  • adobe flash_player10.3.183.18, 11.2.202.228, 11.1.111.8, 11.2.202.223 or later
  • adobe adobe_air3.2.0.2070 or later

Affected products

ProductAffected versionsFixed in
adobe flash_playerv < 10.3.183.18, 11.0 ≤ v < 11.2.202.228, v < 11.1.111.8, 11.0 ≤ v < 11.2.202.22310.3.183.18, 11.2.202.228, 11.1.111.8, 11.2.202.223
adobe adobe_airv < 3.2.0.20703.2.0.2070
xerox freeflow_print_server8.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.