Signature Detail

HTTP: Adobe Flash Player ActiveX Null Dereference

This signature detects attempts to exploit a known vulnerability in Adobe Flash Play ActiveX. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Adobe Flash Player is prone to multiple security vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application or disclose sensitive information. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

• Adobe air 1.0
• Adobe air 1.01
• Adobe air 1.1
• Adobe air 1.5
• Adobe air 1.5.1
• Adobe air 1.5.2
• Adobe air 1.5.3
• Adobe air 1.5.3.9120
• Adobe air 1.5.3.9130
• Adobe air 2.0.2
• Adobe air 2.0.2.12610
• Adobe air 2.0.3
• Adobe air 2.0.3
• Adobe air 2.0.4
• Adobe air 2.5.1
• Adobe air 2.6
• Adobe air 2.6.19120
• Adobe air 2.6.19140
• Adobe air 2.7
• Adobe air 2.7.1
• Adobe air 2.7.1.1961
• Adobe air 3.0
• Adobe air 3.1.0.4880
• Adobe air 3.2.0.2070
• Adobe air 3.2.0.2080
• Adobe flash_player 10
• Adobe flash_player 10.0.0.584
• Adobe flash_player 10.0.12.10
• Adobe flash_player 10.0.12 .35
• Adobe flash_player 10.0.12 .36
• Adobe flash_player 10.0.15 .3
• Adobe flash_player 10.0.22.87
• Adobe flash_player 10.0.32 18
• Adobe flash_player 10.0.32.18
• Adobe flash_player 10.0.42.34
• Adobe flash_player 10.0.45 2
• Adobe flash_player 10.0.45 2
• Adobe flash_player 10.0.45.2
• Adobe flash_player 10.1.102.64
• Adobe flash_player 10.1.102.65
• Adobe flash_player 10.1.105.6
• Adobe flash_player 10.1.106.16
• Adobe flash_player 10.1.51.66
• Adobe flash_player 10.1.52.14.1
• Adobe flash_player 10.1.52.15
• Adobe flash_player 10.1.53.64
• Adobe flash_player 10.1.82.76
• Adobe flash_player 10.1.85.3
• Adobe flash_player 10.1.92.10
• Adobe flash_player 10.1.92.10
• Adobe flash_player 10.1.92.8
• Adobe flash_player 10.1.95.1
• Adobe flash_player 10.1.95.2
• Adobe flash_player 10.1.95.2
• Adobe flash_player 10.1 Release Candidate
• Adobe flash_player 10.2.152
• Adobe flash_player 10.2.152.21
• Adobe flash_player 10.2.152.32
• Adobe flash_player 10.2.152.33
• Adobe flash_player 10.2.153.1
• Adobe flash_player 10.2.154.13
• Adobe flash_player 10.2.154.18
• Adobe flash_player 10.2.154.24
• Adobe flash_player 10.2.154.25
• Adobe flash_player 10.2.154.27
• Adobe flash_player 10.2.154.28
• Adobe flash_player 10.2.156.12
• Adobe flash_player 10.2.157.51
• Adobe flash_player 10.2.159.1
• Adobe flash_player 10.3.181.14
• Adobe flash_player 10.3.181.16
• Adobe flash_player 10.3.181.16
• Adobe flash_player 10.3.181.22
• Adobe flash_player 10.3.181.23
• Adobe flash_player 10.3.181.26
• Adobe flash_player 10.3.181.34
• Adobe flash_player 10.3.183.10
• Adobe flash_player 10.3.183.4
• Adobe flash_player 10.3.183.5
• Adobe flash_player 10.3.183.7
• Adobe flash_player 10.3.185.21
• Adobe flash_player 10.3.185.22
• Adobe flash_player 10.3.185.22
• Adobe flash_player 10.3.185.23
• Adobe flash_player 10.3.185.25
• Adobe flash_player 10.3.186.2
• Adobe flash_player 10.3.186.3
• Adobe flash_player 10.3.186.6
• Adobe flash_player 10.3.186.7
• Adobe flash_player 11.0.1.152
• Adobe flash_player 11.1.102.228
• Adobe flash_player 11.1.102.55
• Adobe flash_player 11.1.102.62
• Adobe flash_player 11.1.102.63
• Adobe flash_player 11.1.111.5
• Adobe flash_player 11.1.111.6
• Adobe flash_player 11.1.111.7
• Adobe flash_player 11.1.111.8
• Adobe flash_player 11.1.111.9
• Adobe flash_player 11.1.112.61
• Adobe flash_player 11.1.115.6
• Adobe flash_player 11.1.115.7
• Adobe flash_player 11.1.115.8
• Adobe flash_player 11.2.202.223
• Adobe flash_player 11.2.202.228
• Adobe flash_player 11.2.202.229
• Adobe flash_player 11.2.202.229
• Adobe flash_player 11.2.202.233
• Adobe flash_player 11.2.202.235
• Adobe flash_player 9
• Adobe flash_player 9.0.112.0
• Adobe flash_player 9.0.114.0
• Adobe flash_player 9.0.115.0
• Adobe flash_player 9.0.124.0
• Adobe flash_player 9.0.125.0
• Adobe flash_player 9.0.151 .0
• Adobe flash_player 9.0.152 .0
• Adobe flash_player 9.0.155.0
• Adobe flash_player 9.0.159.0
• Adobe flash_player 9.0.16
• Adobe flash_player 9.0.18D60
• Adobe flash_player 9.0.20
• Adobe flash_player 9.0.20.0
• Adobe flash_player 9.0.246 0
• Adobe flash_player 9.0.246.0
• Adobe flash_player 9.0.260.0
• Adobe flash_player 9.0.262
• Adobe flash_player 9.0.262.0
• Adobe flash_player 9.0.277.0
• Adobe flash_player 9.0.280
• Adobe flash_player 9.0.28.0
• Adobe flash_player 9.0.28.0
• Adobe flash_player 9.0.283.0
• Adobe flash_player 9.0.289.0
• Adobe flash_player 9.0.31.0
• Adobe flash_player 9.0.31.0
• Adobe flash_player 9.0.45.0
• Adobe flash_player 9.0.47.0
• Adobe flash_player 9.0.48.0
• Red_hat enterprise_linux_desktop_supplementary 5 Client
• Red_hat enterprise_linux_desktop_supplementary 6
• Red_hat enterprise_linux_server_supplementary 6
• Red_hat enterprise_linux_supplementary 5 Server
• Red_hat enterprise_linux_workstation_supplementary 6
• Suse opensuse 11.4
• Suse opensuse 12.1
• Suse suse_linux_enterprise_desktop 10 SP4
• Suse suse_linux_enterprise_desktop 11 SP1
• Suse suse_linux_enterprise_desktop 11 SP2

References

• BugTraq: 53887
• BugTraq: 10057
• CVE: CVE-2012-2039