Lucene search

K
cve[email protected]CVE-2012-2040
HistoryJun 09, 2012 - 12:55 a.m.

CVE-2012-2040

2012-06-0900:55:01
CWE-426
web.nvd.nist.gov
32
cve-2012-2040
adobe flash player
installer
vulnerability
windows
mac os x
linux
android
adobe air
privilege escalation

6.2 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

40.3%

Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.

Affected configurations

NVD
Node
adobeflash_playerRange11.2.202.235
AND
applemacosMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange11.1.115.8
AND
googleandroidRange4.04.4.4
Node
adobeflash_playerRange11.1.111.9
AND
googleandroidRange2.03.2.6
Node
adobeairRange3.2.0.2070
AND
applemacosMatch-
OR
googleandroidMatch-
OR
microsoftwindowsMatch-
Node
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.1
OR
suselinux_enterprise_desktopMatch10sp4
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_desktopMatch11sp2

6.2 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

40.3%