CVE-2012-4167

2012-08-2100:00:00

ubuntu.com

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

87.1%

JSON

Integer overflow in Adobe Flash Player before 10.3.183.23 and 11.x before
11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before
11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and
before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe
AIR SDK before 3.4.0.2540 allows attackers to execute arbitrary code via
unspecified vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchadobe-flashplugin< 11.2.202.238-0lucid1UNKNOWN
ubuntu11.04noarchadobe-flashplugin< 11.2.202.238-0natty1UNKNOWN
ubuntu11.10noarchadobe-flashplugin< 11.2.202.238-0oneiric1UNKNOWN
ubuntu12.04noarchadobe-flashplugin< 11.2.202.238-0precise1UNKNOWN
ubuntu10.04noarchflashplugin-nonfree< 11.2.202.238ubuntu0.10.04.1UNKNOWN
ubuntu11.04noarchflashplugin-nonfree< 11.2.202.238ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchflashplugin-nonfree< 11.2.202.238ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchflashplugin-nonfree< 11.2.202.238ubuntu0.12.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	adobe-flashplugin	< 11.2.202.238-0lucid1	UNKNOWN
ubuntu	11.04	noarch	adobe-flashplugin	< 11.2.202.238-0natty1	UNKNOWN
ubuntu	11.10	noarch	adobe-flashplugin	< 11.2.202.238-0oneiric1	UNKNOWN
ubuntu	12.04	noarch	adobe-flashplugin	< 11.2.202.238-0precise1	UNKNOWN
ubuntu	10.04	noarch	flashplugin-nonfree	< 11.2.202.238ubuntu0.10.04.1	UNKNOWN
ubuntu	11.04	noarch	flashplugin-nonfree	< 11.2.202.238ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	flashplugin-nonfree	< 11.2.202.238ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	flashplugin-nonfree	< 11.2.202.238ubuntu0.12.04.1	UNKNOWN