CVE-2012-4168: Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before…

PriorityP420medium4.3CVSS 2.0

AVNACMAuNCPINAN

EPSS

2.57%

83.4th percentile

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow remote attackers to read content from a different domain via a crafted web site.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
adobe	air	< 3.4.0.2540	3.4.0.2540
adobe	air_sdk	< 3.4.0.2540	3.4.0.2540
adobe	flash_player	>= 10.3 < 10.3.183.23	10.3.183.23
adobe	flash_player	>= 11.1 < 11.1.111.16	11.1.111.16
adobe	flash_player	>= 11.1 < 11.1.115.17	11.1.115.17
adobe	flash_player	>= 11.2 < 11.2.202.238	11.2.202.238
adobe	flash_player	>= 11.4 < 11.4.402.265	11.4.402.265

CVSS provenance

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

vendor_redhat4.3MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.