CVEvulnerability
CVE-2012-2034
CISA Known Exploited Vulnerability
Adobe Flash Player Memory Corruption Vulnerability — Adobe Flash Player
Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).
- Added to KEV
- 2022-03-28
- Remediation due
- 2022-04-18
- Ransomware use
- Unknown
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2012-2034
- Status
- Analyzed
- Published
- 2012-06-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.
Affected configurations
• adobe flash player (<= 11.2.202.235)
• adobe flash player (<= 11.1.115.8)
• adobe flash player (<= 11.1.111.9)
• adobe air (<= 3.2.0.2070)
• opensuse opensuse 11.4
• opensuse opensuse 12.1
• suse linux enterprise desktop 10
• suse linux enterprise desktop 11
• redhat enterprise linux desktop 5.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux eus 6.2
• redhat enterprise linux server 5.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server aus 6.2
• redhat enterprise linux workstation 5.0
• redhat enterprise linux workstation 6.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0722.html Third Party Advisory
- http://www.adobe.com/support/security/bulletins/apsb12-14.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0722.html Third Party Advisory
- http://www.adobe.com/support/security/bulletins/apsb12-14.html Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-2034 US Government Resource