Multiple vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.

1) An error when parsing ActionScript can be exploited to corrupt memory.

2) An unspecified error can be exploited to cause a stack-based buffer overflow.

3) An integer overflow error can be exploited to corrupt memory.

4) An error within NPSWF32.dll when parsing certain tags can be exploited to corrupt memory.

5) An error in the "SoundMixer.computeSpectrum()" method can be exploited to bypass the same-origin policy.

6) Unspecified errors related to "null dereference" may reportedly allow code execution.

7) An unspecified error in the installer allows planting a binary file and may allow execution of arbitrary code.

The vulnerabilities are reported in the following versions:
* Adobe Flash Player 11.2.202.235 and earlier for Windows, Macintosh and Linux
* Adobe Flash Player 11.1.115.8 and earlier for Android 4.x
* Adobe Flash Player 11.1.111.9 and earlier for Android 3.x and 2.x
* Adobe AIR 3.2.0.2070 and earlier for Windows, Macintosh and Android

Solution
Update to a fixed version.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) wushi of team509 via iDefense VCP.
4) Kai Lu, Fortinet's FortiGuard Labs.
5) Mitsuaki Shiraishi, Symantec Japan via JPCERT/CC.

The vendor credits:
2) Manuel Caballero, Microsoft Vulnerability Research (MSVR).
3) Haifei Li, Microsoft Malware Protection Center (MMPC) and Microsoft Vulnerability Research (MSVR).
6) Tavis Ormandy, Google Security Team.
7) An anonymous person.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Adobe:
http://www.adobe.com/support/security/bulletins/apsb12-14.html

JVN:
http://jvn.jp/en/jp/JVN38163638/index.html
http://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000046.html

Fortinet's FortiGuard Labs:
http://www.fortiguard.com/advisory/FGA-2012-17.html

iDefense:
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=987

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers