CVE-2012-2038
published 2012-06-09CVE-2012-2038: Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
3.65%
88.4th percentile
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | air | <= 3.2.0.2070 | — |
| adobe | flash_player | <= 11.2.202.235 | — |
| adobe | flash_player | <= 11.1.115.8 | — |
| adobe | flash_player | <= 11.1.111.9 | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | enterprise_linux_workstation | — | — |
| suse | linux_enterprise_desktop | — | — |
| suse | linux_enterprise_desktop | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2g9j-4mvx-6c42: Adobe Flash Player before 10
ghsa_unreviewed·2022-05-13
CVE-2012-2038 [MEDIUM] CWE-200 GHSA-2g9j-4mvx-6c42: Adobe Flash Player before 10
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
Red Hat
flash-plugin: information disclosure flaw (APSB12-14)
vendor_redhat·2012-06-08·CVSS 4.3
CVE-2012-2038 [MEDIUM] flash-plugin: information disclosure flaw (APSB12-14)
flash-plugin: information disclosure flaw (APSB12-14)
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0722.htmlhttp://www.adobe.com/support/security/bulletins/apsb12-14.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0722.htmlhttp://www.adobe.com/support/security/bulletins/apsb12-14.html
2012-06-09
Published