CVE-2012-0767

2012-02-1619:55:00

CWE-79

[email protected]

web.nvd.nist.gov

903

In Wild

cve-2012-0767

cross-site scripting

xss

adobe flash player

vulnerability

security

nvd

universal xss

uxss

5.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.1%

JSON

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka “Universal XSS (UXSS),” as exploited in the wild in February 2012.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerlt10.3.183.15
adobe:flash_playeradobe flash playerlt11.1.102.62
adobe:flash_playeradobe flash playerlt11.1.111.6
adobe:flash_playeradobe flash playerlt11.1.115.6

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	lt	10.3.183.15
adobe:flash_player	adobe flash player	lt	11.1.102.62
adobe:flash_player	adobe flash player	lt	11.1.111.6
adobe:flash_player	adobe flash player	lt	11.1.115.6