CVE-2012-0767

CVSS 2.0 Score 4.3 of 10 (medium)

Details

Published Feb 16, 2012
Updated: Dec 20, 2024
CWE ID 79

Summary

CVE-2012-0767 is a cross-site scripting (XSS) vulnerability affecting Adobe Flash Player versions prior to 10.3.183.15 and 11.x before 11.1.102.62 on multiple operating systems, including Windows, Mac OS X, Linux, and Solaris. Additionally, it impacts versions before 11.1.111.6 on Android 2.x and 3.x, and before 11.1.115.6 on Android 4.x. This issue allows remote attackers to inject arbitrary web script or HTML, exploited in the wild in February 2012, marking it as "Universal XSS (UXSS)".

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Adobe Flash Player

Affected Vendors

  • Adobe

Advisories, Assessments, and Mitigations