RETIRED: Adobe Flash Player and AIR APSB12-19 Multiple Remote Vulnerabilities

Bugtraq ID:	55136
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2012 12:00AM
Updated:	Jun 20 2013 09:38AM
Credit:	Xu Liu of Fortinet's FortiGuard Labs, Will Dormann of CERT, Honggang Ren of Fortinet's FortiGuard Labs, Alexander Gavrun through iDefense, and Claudio Santambrogio of Opera Software ASA
Vulnerable:	Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Desktop Supplementary 5 client Microsoft Windows Server 2012 0 Microsoft Windows 8 for 64-bit Systems 0 Microsoft Windows 8 for 32-bit Systems 0 Microsoft Internet Explorer 10 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 8 for 32-bit Systems 0 + Microsoft Windows 8 for 32-bit Systems 0 + Microsoft Windows 8 for x64-based Systems 0 + Microsoft Windows 8 for x64-based Systems 0 + Microsoft Windows RT 0 + Microsoft Windows RT 0 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2012 0 + Microsoft Windows Server 2012 0 + Microsoft Windows Server 2012 0 Google Chrome 21.0.1180.79 Google Chrome 21.0.1180.75 Google Chrome 21.0.1180.60 Google Chrome 21.0.1180.50 Google Chrome 21.0.1180.49 Gentoo Linux Adobe Flash Player for Android 11.1.111 10 Adobe Flash Player for Android 11.1.115.11 Adobe Flash Player for Android 11.1.102.59 Adobe Flash Player 11.3.300 271 Adobe Flash Player 11.3.300 270 Adobe Flash Player 11.3.300 262 Adobe Flash Player 11.3.300 257 Adobe Flash Player 11.2.202 238 Adobe Flash Player 11.2.202 236 Adobe Flash Player 11.2.202 236 Adobe Flash Player 11.2.202.235 Adobe Flash Player 11.2.202.233 Adobe Flash Player 11.2.202.229 Adobe Flash Player 11.2.202.228 Adobe Flash Player 11.2.202.223 Adobe Flash Player 11.1.115.8 Adobe Flash Player 11.1.115.7 Adobe Flash Player 11.1.115.6 Adobe Flash Player 11.1.112.61 Adobe Flash Player 11.1.111.9 Adobe Flash Player 11.1.111.8 Adobe Flash Player 11.1.111.7 Adobe Flash Player 11.1.111.6 Adobe Flash Player 11.1.111.5 Adobe Flash Player 11.1.102.63 Adobe Flash Player 11.1.102.62 Adobe Flash Player 11.1.102.55 Adobe Flash Player 11.1.102.228 Adobe Flash Player 11.0.1.152 Adobe AIR 3.3 3610 Adobe AIR 3.3.0.3690 Adobe AIR 3.3.0.3670 Adobe AIR 3.3.0.3650
Not Vulnerable:	Google Chrome 21.0.1180.83 Google Chrome 21.0.1180.82 Google Chrome 21.0.1180.81 Adobe Flash Player for Android 11.1.115.17 Adobe Flash Player for Android 11.1.111.16 Adobe Flash Player 11.4.402.265 Adobe Flash Player 11.3.31.230 Adobe Flash Player 11.2.202.238 Adobe AIR 3.4.0.2540

RETIRED: Adobe Flash Player and AIR APSB12-19 Multiple Remote Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and will not require specific exploit code.

RETIRED: Adobe Flash Player and AIR APSB12-19 Multiple Remote Vulnerabilities

References:

• Adobe AIR homepage (Adobe)
  
• Adobe Flash Homepage (Adobe)
  
• VUPEN - Adobe Flash Player Matrix3D Integer Overflow Code Execution (APSB12-19) (VUPEN Security Research )
  
• APSB12-19: Security updates available for Adobe Flash Player (Adobe)
  
• Microsoft Security Advisory (2755801) Update for Vulnerabilities in Adobe Flash (Microsoft)
  
• Stable Channel Update (Karen Grunberg)