Multiple Memory Corruption Vulnerabilities in Adobe Flash Player

Release date:
Updated on:

Affected Systems:
Adobe Flash Player 11.x
Unaffected system:
Adobe Flash Player 11.2.202.228
Adobe Flash Player 11.2.202.223
Adobe Flash Player 11.1.111.8
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52748
Cve id: CVE-2012-0773, CVE-2012-0772

Adobe Flash Player is an integrated multimedia Player.

Adobe Flash Player has a memory corruption vulnerability in URL security domain check and NetStream implementation. Attackers can exploit this vulnerability to corrupt the memory and cause arbitrary code execution.

<* Source: Microsoft Vulnerability Research

Link: http://www.adobe.com/support/security/bulletins/apsb12-07.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Adobe
-----
Adobe has released a Security Bulletin (APSB12-07) and patches for this:

APSB12-07: Security update available for Adobe Flash Player

Link: http://www.adobe.com/support/security/bulletins/apsb12-07.html