Lucene search

AdobeCVE-2012-4168

HistoryAug 21, 2012 - 11:55 p.m.

CVE-2012-4168

2012-08-2123:55:01

CWE-200

adobe

web.nvd.nist.gov

cve-2012-4168

adobe flash player

vulnerability

remote attackers

content read

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

71.1%

JSON

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow remote attackers to read content from a different domain via a crafted web site.

Affected configurations

Nvd

Node

adobeflash_playerRange10.3–10.3.183.23

adobeflash_playerRange11.4–11.4.402.265

AND

applemac_os_xMatch-

microsoftwindowsMatch-

Node

adobeflash_playerRange10.3–10.3.183.23

adobeflash_playerRange11.2–11.2.202.238

AND

linuxlinux_kernelMatch-

Node

adobeflash_playerRange11.1–11.1.111.16

AND

googleandroidRange2.0–2.3.7

googleandroidRange3.0–3.2.6

Node

adobeflash_playerRange11.1–11.1.115.17

AND

googleandroidRange4.0–4.4.4

Node

adobeairRange<3.4.0.2540

adobeair_sdkRange<3.4.0.2540

VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
applemac_os_x-cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
adobeair*cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
adobeair_sdk*cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	flash_player	*	cpe:2.3:a:adobe:flash_player::::::::
apple	mac_os_x	-	cpe:2.3:o:apple:mac_os_x:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
google	android	*	cpe:2.3:o:google:android::::::::
adobe	air	*	cpe:2.3:a:adobe:air::::::::
adobe	air_sdk	*	cpe:2.3:a:adobe:air_sdk::::::::