Tenable6545.PRMFlash Player < 10.3.183.20 / 11.3.300.257 Multiple Vulnerabilities (APSB12-14)
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.014 Low
EPSS
Percentile
86.6%
Versions of Flash Player earlier than 10.3.189.19 / 11.3.300.256 are potentially affected by multiple vulnerabilities :
- Multiple memory corruption vulnerabilities exist that could lead to code execution. (CVE-2012-2034, CVE-2012-2037)
- A stack overflow vulnerability exists that could lead to code execution. (CVE-2012-2035)
- An integer overflow vulnerability exists that could lead to code execution. (CVE-2012-2036)
- A security bypass vulnerability exists that could lead to information disclosure. (CVE-2012-2038)
- A null dereference vulnerability exists that could lead to code execution. (CVE-2012-2039)
- A binary planting vulnerability exists in the Flash Player installer that could lead to code execution.(CVE-2012-2040)
Binary data 6545.prm| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | flash_player | cpe:/a:adobe:flash_player |
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2034
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2035
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2036
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2037
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2038
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2039
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2040
www.adobe.com/support/security/bulletins/apsb12-14.html
Related
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.014 Low
EPSS
Percentile
86.6%