Description
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted MP4 data.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | flash-plugin | 10.3.183.15-1.el6 | RHSA-2012:0144 |
| RHEL 5 | flash-plugin | 10.3.183.15-1.el5 | RHSA-2012:0144 |
Advisories 1
- RHSA-2012:0144 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- openSUSE-SU-2012:0265 vendor-advisory
- oval:org.mitre.oval:def:14795 vdb-entry signature
- GLSA-201204-07 vendor-advisory
- 48265 third-party-advisory
- oval:org.mitre.oval:def:15601 vdb-entry signature
- http://www.adobe.com/support/security/bulletins/apsb12-03.html
- RHSA-2012:0144 vendor-advisory
- 48819 third-party-advisory