Details of VAR-201208-0417

ID

VAR-201208-0417

CVE

CVE-2012-4171

TITLE

Adobe Flash Player Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-004030

DESCRIPTION

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to cause a denial of service (application crash) by leveraging a logic error during handling of Firefox dialogs. Adobe Flash Player There is a service disruption ( Application crash ) There is a vulnerability that becomes a condition.By the attacker, Firefox Service operation disruption by generating a logic error during dialog processing ( Application crash ) There is a possibility of being put into a state. Adobe Flash Player and AIR are prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause the affected application to crash. The product enables viewing of applications, content and video across screens and browsers

Trust: 1.98

sources: NVD: CVE-2012-4171 // JVNDB: JVNDB-2012-004030 // BID: 55365 // VULHUB: VHN-57452

AFFECTED PRODUCTS

vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.238	Trust: 1.8
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.111.5	Trust: 1.6
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.112.61	Trust: 1.6
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.112.60	Trust: 1.6
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.115.6	Trust: 1.6
vendor:	adobe	model:	flash player	scope:	eq	version:	11.3.300.270	Trust: 1.6
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.111.8	Trust: 1.6
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.111.6	Trust: 1.6
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.111.7	Trust: 1.6
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.102.59	Trust: 1.6
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.25	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.0.584	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.262.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0.1.153	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.115.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.35.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.159.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.68.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.20.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.31.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	6.0.21.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.16	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.8.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.106.17	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.246.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	4	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.24.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.22.87	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.235	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152.26	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.114.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.28	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.19.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.63	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.22.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.18	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.92.10	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.95.2	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.16	Trust: 1.0
vendor:	adobe	model:	flash player for android	scope:	lte	version:	11.1.115.11	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	6	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.283.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152.32	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.48.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.45.2	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.95.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.12.10	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.45.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.155.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.22	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.32.18	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.33.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.61.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.124.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.7	Trust: 1.0
vendor:	adobe	model:	air	scope:	lte	version:	3.3.0.3670	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.159.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	2	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.20	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.112.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.52.14	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.105.6	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152.33	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	lte	version:	10.3.183.19	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.18d60	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.47.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.5	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.26	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.10	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.106.16	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.59	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.15.3	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.39.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.153.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.82.76	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.69.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.12.36	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.24.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.53.64	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.92.8	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.62	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.67.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.34	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.42.34	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.3.300.271	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.156.12	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.16	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0.1.152	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.1.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.14.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.260.0	Trust: 1.0
vendor:	adobe	model:	flash player for android	scope:	lte	version:	11.1.111.10	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.11	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.73.0	Trust: 1.0
vendor:	adobe	model:	air sdk	scope:	lte	version:	3.3.0.3690	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.13	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.125.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.228	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.23	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.25	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.277.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.53.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	5	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.42.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.2	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.28.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.151.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	3	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.233	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.280	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.55	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.102.64	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.2.54	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.52.14.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.14	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.66.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.9.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.52.15	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.70.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.85.3	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.125.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	6.0.79	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.60.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.34.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.15	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.152.0	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.31	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.157.51	Trust: 1.0
vendor:	microsoft	model:	windows rt	scope:	-	version:	-	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	(windows	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	11.x (windows macintosh)	Trust: 0.8
vendor:	microsoft	model:	windows 8	scope:	eq	version:	for 64-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 8	scope:	eq	version:	for 32-bit systems	Trust: 0.8
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.111.16	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	eq	version:	linux)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	eq	version:	macintosh	Trust: 0.8
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.115.17	Trust: 0.8
vendor:	adobe	model:	flash player for android	scope:	lt	version:	(android 4.x)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.23	Trust: 0.8
vendor:	microsoft	model:	windows server	scope:	eq	version:	2012	Trust: 0.8
vendor:	adobe	model:	flash player for android	scope:	lt	version:	(android 2.x 3.x)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	11.x (linux)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	eq	version:	11.4.402.265	Trust: 0.8
vendor:	microsoft	model:	internet explorer	scope:	eq	version:	10	Trust: 0.8
vendor:	adobe	model:	flash player for android	scope:	eq	version:	11.1.115.11	Trust: 0.6

sources: JVNDB: JVNDB-2012-004030 // CNNVD: CNNVD-201208-696 // NVD: CVE-2012-4171

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-4171
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2012-4171
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201208-696
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-57452
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2012-4171
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-57452
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-57452 // JVNDB: JVNDB-2012-004030 // CNNVD: CNNVD-201208-696 // NVD: CVE-2012-4171

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-Other	Trust: 0.8

sources: JVNDB: JVNDB-2012-004030 // NVD: CVE-2012-4171

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201208-696

TYPE

Unknown

Trust: 0.3

sources: BID: 55365

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-004030

PATCH

title:	APSB12-19	url:	http://www.adobe.com/support/security/bulletins/apsb12-19.html	Trust: 0.8
title:	APSB12-19 (cq08220315)	url:	http://helpx.adobe.com/jp/flash-player/kb/cq08220315.html	Trust: 0.8
title:	APSB12-19	url:	http://www.adobe.com/jp/support/security/bulletins/apsb12-19.html	Trust: 0.8
title:	Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (2755801)	url:	http://technet.microsoft.com/en-us/security/advisory/2755801	Trust: 0.8
title:	Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (KB2755399)	url:	http://support.microsoft.com/kb/2755399	Trust: 0.8
title:	Internet Explorer 10 における Adobe Flash Player の脆弱性に関する更新プログラム (2755801)	url:	http://technet.microsoft.com/ja-jp/security/advisory/2755801	Trust: 0.8
title:	install_flashplayer11x32ax_mssd_aih	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=44456	Trust: 0.6

sources: JVNDB: JVNDB-2012-004030 // CNNVD: CNNVD-201208-696

EXTERNAL IDS

db:	NVD	id:	CVE-2012-4171	Trust: 2.8
db:	BID	id:	55365	Trust: 1.4
db:	JVNDB	id:	JVNDB-2012-004030	Trust: 0.8
db:	CNNVD	id:	CNNVD-201208-696	Trust: 0.7
db:	NSFOCUS	id:	20837	Trust: 0.6
db:	VULHUB	id:	VHN-57452	Trust: 0.1

sources: VULHUB: VHN-57452 // BID: 55365 // JVNDB: JVNDB-2012-004030 // CNNVD: CNNVD-201208-696 // NVD: CVE-2012-4171

REFERENCES

url:	http://www.adobe.com/support/security/bulletins/apsb12-19.html	Trust: 1.7
url:	http://www.securityfocus.com/bid/55365	Trust: 1.1
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/78226	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-4171	Trust: 0.8
url:	http://www.ipa.go.jp/security/ciadr/vul/20120822-adobe.html	Trust: 0.8
url:	http://www.jpcert.or.jp/at/2012/at120026.txt	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-4171	Trust: 0.8
url:	http://www.npa.go.jp/cyberpolice/#topics	Trust: 0.8
url:	http://www.nsfocus.net/vulndb/20837	Trust: 0.6
url:	http://www.adobe.com/products/air/	Trust: 0.3
url:	http://www.adobe.com	Trust: 0.3

sources: VULHUB: VHN-57452 // BID: 55365 // JVNDB: JVNDB-2012-004030 // CNNVD: CNNVD-201208-696 // NVD: CVE-2012-4171

CREDITS

Attila Suszter

Trust: 0.3

sources: BID: 55365

SOURCES

db:	VULHUB	id:	VHN-57452
db:	BID	id:	55365
db:	JVNDB	id:	JVNDB-2012-004030
db:	CNNVD	id:	CNNVD-201208-696
db:	NVD	id:	CVE-2012-4171

LAST UPDATE DATE

2024-08-14T15:40:11.862000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-57452	date:	2018-10-30T00:00:00
db:	BID	id:	55365	date:	2015-03-19T09:22:00
db:	JVNDB	id:	JVNDB-2012-004030	date:	2012-12-26T00:00:00
db:	CNNVD	id:	CNNVD-201208-696	date:	2012-09-04T00:00:00
db:	NVD	id:	CVE-2012-4171	date:	2018-10-30T16:26:24.687

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-57452	date:	2012-08-31T00:00:00
db:	BID	id:	55365	date:	2012-08-30T00:00:00
db:	JVNDB	id:	JVNDB-2012-004030	date:	2012-09-04T00:00:00
db:	CNNVD	id:	CNNVD-201208-696	date:	2012-08-31T00:00:00
db:	NVD	id:	CVE-2012-4171	date:	2012-08-31T19:55:01.230