Lucene search

K
cve[email protected]CVE-2012-4167
HistoryAug 21, 2012 - 11:55 p.m.

CVE-2012-4167

2012-08-2123:55:01
CWE-189
web.nvd.nist.gov
115
cve-2012-4167
integer overflow
adobe flash player
arbitrary code execution
nvd
security vulnerability

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

87.1%

Integer overflow in Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allows attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD
Node
adobeflash_playerRange10.310.3.183.23
OR
adobeflash_playerRange11.411.4.402.265
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange10.310.3.183.23
OR
adobeflash_playerRange11.211.2.202.238
AND
linuxlinux_kernelMatch-
Node
adobeflash_playerRange11.111.1.111.16
AND
googleandroidRange2.02.3.7
OR
googleandroidRange3.03.2.6
Node
adobeflash_playerRange11.111.1.115.17
AND
googleandroidRange4.04.4.4
Node
adobeairRange<3.4.0.2540
OR
adobeair_sdkRange<3.4.0.2540

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

87.1%