⚠ Actively exploited
Added to CISA KEV on 2022-03-28. Federal agencies required to patch by 2022-04-18. Required action: The impacted product is end-of-life and should be disconnected if still in use..
CVE-2012-2034 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe AIR
CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer11 documents7 sources
Severity
9.3CRITICALNVD
NVD7.5CNA7.5VulnCheck7.5CISA7.5
EPSS
10.7%
top 6.66%
CISA KEV
KEV
Added 2022-03-28
Due 2022-04-18
Exploit
Exploited in wild
Active exploitation observed
Affected products
Timeline
PublishedJun 9
KEV addedMar 28
KEV dueApr 18
Latest updateMay 13
CISA Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Description
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9
Affected Packages7 packages
Also affects: Enterprise Linux 6.2
🔴Vulnerability Details
5📋Vendor Advisories
3💬Community
1Bugzilla▶
CVE-2012-2034 CVE-2012-2035 CVE-2012-2036 CVE-2012-2037 CVE-2012-2039 flash-plugin: multiple code execution flaws (APSB12-14)↗2012-06-08