CVEvulnerability

CVE-2012-2040

9.3 HIGH Published 2012-06-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-426

Description

Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.

Affected configurations

• adobe flash player (<= 11.2.202.235) • adobe flash player (<= 11.1.115.8) • adobe flash player (<= 11.1.111.9) • adobe air (<= 3.2.0.2070) • opensuse opensuse 11.4 • opensuse opensuse 12.1 • suse linux enterprise desktop 10 • suse linux enterprise desktop 11

Related

Weakness · CWE (1)

  • CWE-426 Untrusted Search Path weakness

References