Lucene search

K
cve[email protected]CVE-2012-4168
HistoryAug 21, 2012 - 11:55 p.m.

CVE-2012-4168

2012-08-2123:55:01
CWE-200
web.nvd.nist.gov
38
cve-2012-4168
adobe flash player
vulnerability
remote attackers
content read
nvd

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.1%

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow remote attackers to read content from a different domain via a crafted web site.

Affected configurations

NVD
Node
adobeflash_playerRange10.310.3.183.23
OR
adobeflash_playerRange11.411.4.402.265
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange10.310.3.183.23
OR
adobeflash_playerRange11.211.2.202.238
AND
linuxlinux_kernelMatch-
Node
adobeflash_playerRange11.111.1.111.16
AND
googleandroidRange2.02.3.7
OR
googleandroidRange3.03.2.6
Node
adobeflash_playerRange11.111.1.115.17
AND
googleandroidRange4.04.4.4
Node
adobeairRange<3.4.0.2540
OR
adobeair_sdkRange<3.4.0.2540

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.1%