Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-2040
HistoryJun 09, 2012 - 12:55 a.m.

CVE-2012-2040

2012-06-0900:55:01
CWE-426
[email protected]
web.nvd.nist.gov
32
cve-2012-2040
adobe flash player
installer
vulnerability
windows
mac os x
linux
android
adobe air
privilege escalation

6.2 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

40.3%

JSON

Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.

Affected configurations

NVD
Node
adobeflash_playerRange≤11.2.202.235
AND
applemacosMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange≤11.1.115.8
AND
googleandroidRange4.0–4.4.4
Node
adobeflash_playerRange≤11.1.111.9
AND
googleandroidRange2.0–3.2.6
Node
adobeairRange≤3.2.0.2070
AND
applemacosMatch-
OR
googleandroidMatch-
OR
microsoftwindowsMatch-
Node
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.1
OR
suselinux_enterprise_desktopMatch10sp4
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_desktopMatch11sp2

Related

ubuntucve 1
nvd 1
prion 1
cvelist 1
openvas 18
nessus 9
suse 2
freebsd 2
gentoo 1
ubuntucve
ubuntucve
CVE-2012-2040
2012-06-09 00:00:00
nvd
nvd
CVE-2012-2040
2012-06-09 00:55:01
prion
prion
Design/Logic Flaw
2012-06-09 00:55:00
cvelist
cvelist
CVE-2012-2040
2012-06-09 00:00:00
openvas
openvas
SuSE Update for flash-player openSUSE-SU-2012:0723-1 (flash-player)
2012-12-13 00:00:00
Adobe Air Multiple Vulnerabilities June-2012 (Mac OS X)
2013-07-11 00:00:00
Adobe Flash Player Multiple Vulnerabilities (Jun 2012) - Windows
2012-06-20 00:00:00
nessus
nessus
Flash Player for Mac <= 10.3.183.19 / 11.3.300.256 Multiple Vulnerabilities (APSB12-14)
2012-06-09 00:00:00
Flash Player < 10.3.183.20 / 11.3.300.257 Multiple Vulnerabilities (APSB12-14)
2011-06-29 00:00:00
FreeBSD : linux-flashplugin -- multiple vulnerabilities (38195f00-b215-11e1-8132-003067b2972c)
2012-06-11 00:00:00
suse
suse
Security update for flash-player (critical)
2012-06-11 20:08:29
flash-player: Update to 11.2.202.236 security release (critical)
2012-06-11 16:08:38
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2012-06-08 00:00:00
linux-flashplugin -- multiple vulnerabilities
2012-10-08 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2012-06-23 00:00:00

6.2 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

40.3%

JSON
Related for CVE-2012-2040
ubuntucve1nvd1prion1cvelist1openvas18nessus9suse2freebsd2gentoo1