Skip to content

CVE-2012-2034 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and bef...

HighCVSS 7.5 EPSS 7.7% CISA KEV added 2022-03-28 · due 2022-04-18 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.

CISA Known Exploited Vulnerability

Date added
2022-03-28
Due date (FCEB)
2022-04-18
Ransomware use
Unknown

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Affected products

ProductAffected versionsFixed in
Adobe flash player <= 11.2.202.235 No fix listed
Adobe flash player <= 11.1.115.8 No fix listed
Adobe flash player <= 11.1.111.9 No fix listed
Adobe air <= 3.2.0.2070 No fix listed
opensuse = 11.4 No fix listed
opensuse = 12.1 No fix listed
SUSE linux enterprise desktop = 10-sp4 No fix listed
SUSE linux enterprise desktop = 11-sp1 No fix listed
SUSE linux enterprise desktop = 11-sp2 No fix listed
redhat enterprise linux desktop = 5.0 No fix listed
redhat enterprise linux desktop = 6.0 No fix listed
redhat enterprise linux eus = 6.2 No fix listed
redhat enterprise linux server = 5.0 No fix listed
redhat enterprise linux server = 6.0 No fix listed
redhat enterprise linux server aus = 6.2 No fix listed
redhat enterprise linux workstation = 5.0 No fix listed
redhat enterprise linux workstation = 6.0 No fix listed

References