CVE-2012-2035 Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10....
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 11.2.202.235 | No fix listed |
| Adobe flash player | <= 11.1.115.8 | No fix listed |
| Adobe flash player | <= 11.1.111.9 | No fix listed |
| Adobe air | <= 3.2.0.2070 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp1 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp2 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.2 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 6.2 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- openSUSE-SU-2012:0723 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0724 mailing-list third-party-advisory vendor-advisory
- RHSA-2012:0722 third-party-advisory vendor-advisory
- www.adobe.com vendor-advisory