Adobe Flash Player Multiple Vulnerabilities

Last Update Date: 14 Feb 2013 17:43 Release Date: 14 Feb 2013 4603 Views

RISK: High Risk

TYPE: Clients - Audio & Video

Multiple vulnerabilities have been identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed on the target user's system, and obtain potentially sensitive information.

A remote user can create a specially crafted file that, when loaded by the target user, will execute arbitrary code on the target system. The code will run with the privileges of the target user.
A buffer overflow, use-after-free memory error, integer overflow and memory corruption error may occur.
A remote user can obtain potentially sensitive information.

Impact

Remote Code Execution
Information Disclosure

System / Technologies affected

Version 11.5.502.149 and prior for Windows/Mac
Version 11.2.202.262 and prior for Linux
Version 11.1.115.37 and prior for Android 4.x
Version 11.1.111.43 and prior for Android 3.x and 2.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
- 11.6.602.168 for Windows
- 11.6.602.167 for Mac
- 11.2.202.270 for Linux
- 11.6.602.167 for Chrome
- 11.6.602.167 for IE 10
- 11.1.115.47 for Android 4.x
- 11.1.111.43 for Android 3.x

Vulnerability Identifier

Source

SecurityTracker