CVE-2012-2040 Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on L...
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 11.2.202.235 | No fix listed |
| Adobe flash player | <= 11.1.115.8 | No fix listed |
| Adobe flash player | <= 11.1.111.9 | No fix listed |
| Adobe air | <= 3.2.0.2070 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp1 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp2 | No fix listed |
References
- openSUSE-SU-2012:0723 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0724 mailing-list third-party-advisory vendor-advisory
- www.adobe.com vendor-advisory