← Back

CVE-2012-0767

nvd nist
Published: Feb 16, 2012Modified: Apr 21, 2026CISA KEV

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)," as exploited in the wild in February 2012.

Affected (4)

Products: Adobe: Flash Player
Adobe
1 product
Flash Player
Configuration A
2 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Adobe
Flash Player
Before 10.3.183.15
Flash Player
From 11.0 to 11.1.102.62
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Oracle
Solaris
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flash Player
Before 11.1.111.6
Running on/withPlatform Versions
Google
Android
From 2.0 to 3.2
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flash Player
Before 11.1.115.6
Running on/withPlatform Versions
Google
Android
Version 4.0

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (17)

Source: psirt@adobe.com
Broken Link
Source: psirt@adobe.com
Third Party Advisory
Source: psirt@adobe.com
Broken Link
Source: psirt@adobe.com
Broken Link
Source: psirt@adobe.com
Third Party Advisory
Source: psirt@adobe.com
Broken LinkPatchVendor Advisory
Source: psirt@adobe.com
Third Party Advisory
Source: psirt@adobe.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.