Signature Detail

HTTP: Adobe Flash Player ActiveX Null Dereference

This signature detects attempts to exploit a known vulnerability in Adobe Flash Play ActiveX. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Adobe Flash Player is prone to multiple security vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application or disclose sensitive information. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

• Adobe AIR 1.0
• Adobe AIR 1.01
• Adobe AIR 1.1
• Adobe AIR 1.5
• Adobe AIR 1.5.1
• Adobe AIR 1.5.2
• Adobe AIR 1.5.3
• Adobe AIR 1.5.3.9120
• Adobe AIR 1.5.3.9130
• Adobe AIR 2.0.2
• Adobe AIR 2.0.2.12610
• Adobe AIR 2.0.3
• Adobe AIR 2.0.3
• Adobe AIR 2.0.4
• Adobe AIR 2.5.1
• Adobe AIR 2.6
• Adobe AIR 2.6.19120
• Adobe AIR 2.6.19140
• Adobe AIR 2.7
• Adobe AIR 2.7.1
• Adobe AIR 2.7.1.1961
• Adobe AIR 3.0
• Adobe AIR 3.1.0.4880
• Adobe AIR 3.2.0.2070
• Adobe AIR 3.2.0.2080
• Adobe Flash Player 10
• Adobe Flash Player 10.0.0.584
• Adobe Flash Player 10.0.12.10
• Adobe Flash Player 10.0.12 .35
• Adobe Flash Player 10.0.12 .36
• Adobe Flash Player 10.0.15 .3
• Adobe Flash Player 10.0.22.87
• Adobe Flash Player 10.0.32 18
• Adobe Flash Player 10.0.32.18
• Adobe Flash Player 10.0.42.34
• Adobe Flash Player 10.0.45 2
• Adobe Flash Player 10.0.45 2
• Adobe Flash Player 10.0.45.2
• Adobe Flash Player 10.1.102.64
• Adobe Flash Player 10.1.102.65
• Adobe Flash Player 10.1.105.6
• Adobe Flash Player 10.1.106.16
• Adobe Flash Player 10.1.51.66
• Adobe Flash Player 10.1.52.14.1
• Adobe Flash Player 10.1.52.15
• Adobe Flash Player 10.1.53.64
• Adobe Flash Player 10.1.82.76
• Adobe Flash Player 10.1.85.3
• Adobe Flash Player 10.1.92.10
• Adobe Flash Player 10.1.92.10
• Adobe Flash Player 10.1.92.8
• Adobe Flash Player 10.1.95.1
• Adobe Flash Player 10.1.95.2
• Adobe Flash Player 10.1.95.2
• Adobe Flash Player 10.1 Release Candidate
• Adobe Flash Player 10.2.152
• Adobe Flash Player 10.2.152.21
• Adobe Flash Player 10.2.152.32
• Adobe Flash Player 10.2.152.33
• Adobe Flash Player 10.2.153.1
• Adobe Flash Player 10.2.154.13
• Adobe Flash Player 10.2.154.18
• Adobe Flash Player 10.2.154.24
• Adobe Flash Player 10.2.154.25
• Adobe Flash Player 10.2.154.27
• Adobe Flash Player 10.2.154.28
• Adobe Flash Player 10.2.156.12
• Adobe Flash Player 10.2.157.51
• Adobe Flash Player 10.2.159.1
• Adobe Flash Player 10.3.181.14
• Adobe Flash Player 10.3.181.16
• Adobe Flash Player 10.3.181.16
• Adobe Flash Player 10.3.181.22
• Adobe Flash Player 10.3.181.23
• Adobe Flash Player 10.3.181.26
• Adobe Flash Player 10.3.181.34
• Adobe Flash Player 10.3.183.10
• Adobe Flash Player 10.3.183.4
• Adobe Flash Player 10.3.183.5
• Adobe Flash Player 10.3.183.7
• Adobe Flash Player 10.3.185.21
• Adobe Flash Player 10.3.185.22
• Adobe Flash Player 10.3.185.22
• Adobe Flash Player 10.3.185.23
• Adobe Flash Player 10.3.185.25
• Adobe Flash Player 10.3.186.2
• Adobe Flash Player 10.3.186.3
• Adobe Flash Player 10.3.186.6
• Adobe Flash Player 10.3.186.7
• Adobe Flash Player 11.0.1.152
• Adobe Flash Player 11.1.102.228
• Adobe Flash Player 11.1.102.55
• Adobe Flash Player 11.1.102.62
• Adobe Flash Player 11.1.102.63
• Adobe Flash Player 11.1.111.5
• Adobe Flash Player 11.1.111.6
• Adobe Flash Player 11.1.111.7
• Adobe Flash Player 11.1.111.8
• Adobe Flash Player 11.1.111.9
• Adobe Flash Player 11.1.112.61
• Adobe Flash Player 11.1.115.6
• Adobe Flash Player 11.1.115.7
• Adobe Flash Player 11.1.115.8
• Adobe Flash Player 11.2.202.223
• Adobe Flash Player 11.2.202.228
• Adobe Flash Player 11.2.202.229
• Adobe Flash Player 11.2.202.229
• Adobe Flash Player 11.2.202.233
• Adobe Flash Player 11.2.202.235
• Adobe Flash Player 9
• Adobe Flash Player 9.0.112.0
• Adobe Flash Player 9.0.114.0
• Adobe Flash Player 9.0.115.0
• Adobe Flash Player 9.0.124.0
• Adobe Flash Player 9.0.125.0
• Adobe Flash Player 9.0.151 .0
• Adobe Flash Player 9.0.152 .0
• Adobe Flash Player 9.0.155.0
• Adobe Flash Player 9.0.159.0
• Adobe Flash Player 9.0.16
• Adobe Flash Player 9.0.18D60
• Adobe Flash Player 9.0.20
• Adobe Flash Player 9.0.20.0
• Adobe Flash Player 9.0.246 0
• Adobe Flash Player 9.0.246.0
• Adobe Flash Player 9.0.260.0
• Adobe Flash Player 9.0.262
• Adobe Flash Player 9.0.262.0
• Adobe Flash Player 9.0.277.0
• Adobe Flash Player 9.0.280
• Adobe Flash Player 9.0.28.0
• Adobe Flash Player 9.0.28.0
• Adobe Flash Player 9.0.283.0
• Adobe Flash Player 9.0.289.0
• Adobe Flash Player 9.0.31.0
• Adobe Flash Player 9.0.31.0
• Adobe Flash Player 9.0.45.0
• Adobe Flash Player 9.0.47.0
• Adobe Flash Player 9.0.48.0
• Red Hat Enterprise Linux Desktop Supplementary 5 Client
• Red Hat Enterprise Linux Desktop Supplementary 6
• Red Hat Enterprise Linux Server Supplementary 6
• Red Hat Enterprise Linux Supplementary 5 Server
• Red Hat Enterprise Linux Workstation Supplementary 6
• SuSE openSUSE 11.4
• SuSE openSUSE 12.1
• SuSE SUSE Linux Enterprise Desktop 10 SP4
• SuSE SUSE Linux Enterprise Desktop 11 SP1
• SuSE SUSE Linux Enterprise Desktop 11 SP2

References

• BugTraq: 53887
• BugTraq: 10057
• CVE: CVE-2012-2039