CVE-2012-0773

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-03-28 · updated 2026-06-16
Weakness: CWE-787

Description

The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected products

Adobe Air: before 3.2.0.2070 — fixed in 3.2.0.2070
Adobe Flash Player 24.0.0.186 and earlier.: before 10.3.183.18; from 11.0 before 11.2.202.228; before 11.1.111.8; from 11.0 before 11.2.202.223 — fixed in 10.3.183.18, 11.1.111.8, 11.2.202.223, 11.2.202.228
Xerox Freeflow Print Server: 8.0, 8.0-sp1, 8.0-sp2

How to fix

Upgrade to a fixed version: Adobe Air 3.2.0.2070; Adobe Flash Player 24.0.0.186 and earlier. 10.3.183.18, 11.1.111.8, 11.2.202.223, 11.2.202.228. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2012-0773 or the next vulnerability affects your stack