Description
The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | flash-plugin | 10.3.183.18-1.el6 | RHSA-2012:0434 |
| RHEL 5 | flash-plugin | 10.3.183.18-1.el5 | RHSA-2012:0434 |
Advisories 1
- RHSA-2012:0434 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 48652 third-party-advisory
- openSUSE-SU-2012:0427 vendor-advisory
- http://www.adobe.com/support/security/bulletins/apsb12-07.html
- 48618 third-party-advisory
- GLSA-201204-07 vendor-advisory
- SUSE-SU-2012:0437 vendor-advisory
- oval:org.mitre.oval:def:15391 vdb-entry signature
- oval:org.mitre.oval:def:16157 vdb-entry signature
- 1026859 vdb-entry
- 48819 third-party-advisory
- http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf