Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-2040
HistoryJun 09, 2012 - 12:55 a.m.

CVE-2012-2040

2012-06-0900:55:01
CWE-426
[email protected]
web.nvd.nist.gov
32
cve-2012-2040
adobe flash player
installer
vulnerability
windows
mac os x
linux
android
adobe air
privilege escalation

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.4%

JSON

Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.

Affected configurations

NVD
Node
adobeflash_playerRange≤11.2.202.235
AND
applemacosMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange≤11.1.115.8
AND
googleandroidRange4.0–4.4.4
Node
adobeflash_playerRange≤11.1.111.9
AND
googleandroidRange2.0–3.2.6
Node
adobeairRange≤3.2.0.2070
AND
applemacosMatch-
OR
googleandroidMatch-
OR
microsoftwindowsMatch-
Node
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.1
OR
suselinux_enterprise_desktopMatch10sp4
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_desktopMatch11sp2

Related

cvelist 1
ubuntucve 1
nvd 1
prion 1
freebsd 2
nessus 9
openvas 18
suse 2
gentoo 1
cvelist
cvelist
CVE-2012-2040
2012-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2012-2040
2012-06-09 00:00:00
nvd
nvd
CVE-2012-2040
2012-06-09 00:55:01
prion
prion
Design/Logic Flaw
2012-06-09 00:55:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2012-06-08 00:00:00
linux-flashplugin -- multiple vulnerabilities
2012-10-08 00:00:00
nessus
nessus
FreeBSD : linux-flashplugin -- multiple vulnerabilities (38195f00-b215-11e1-8132-003067b2972c)
2012-06-11 00:00:00
SuSE 11.1 Security Update : flash-player (SAT Patch Number 6404)
2013-01-25 00:00:00
Flash Player for Mac <= 10.3.183.19 / 11.3.300.256 Multiple Vulnerabilities (APSB12-14)
2012-06-09 00:00:00
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities June-2012 (Windows)
2012-06-20 00:00:00
FreeBSD Ports: linux-f10-flashplugin
2012-08-10 00:00:00
SuSE Update for flash-player openSUSE-SU-2012:0723-1 (flash-player)
2012-12-13 00:00:00
suse
suse
Security update for flash-player (critical)
2012-06-11 20:08:29
flash-player: Update to 11.2.202.236 security release (critical)
2012-06-11 16:08:38
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2012-06-23 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.4%

JSON
Related for CVE-2012-2040
cvelist1ubuntucve1nvd1prion1freebsd2nessus9openvas18suse2gentoo1