Two vulnerabilities have been reported in Adobe Flash Player and Adobe AIR, which can be exploited by malicious people to compromise a user's system.

1) An error within an ActiveX Control when checking the URL security domain can be exploited to corrupt memory.

NOTE: This vulnerability affects Windows Vista and Windows 7 only.

2) A use-after-free error within the NetStream class when updating a NetStream object can be exploited to dereference already freed memory.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in the following versions:
* Adobe Flash Player versions 11.1.102.63 and prior for Windows, Macintosh, Linux, and Solaris.
* Adobe Flash Player versions 11.1.111.7 and prior for Android 3.x and 2.x.
* Adobe AIR versions 3.1.0.4880 and prior for Windows, Macintosh, and Android.

Solution
Update to a fixed version.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Microsoft Vulnerability Research (MSVR).
2) Vupen via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Adobe:
http://www.adobe.com/support/security/bulletins/apsb12-07.html

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-12-057/

Deep Links
Links available to Secunia VIM customers