CVE Vulnerabilities

CVE-2012-0779

Published: May 04, 2012 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an object confusion vulnerability, as exploited in the wild in May 2012.

Affected Software

NameVendorStart VersionEnd Version
Flash_playerAdobe10.3 (including)10.3.183.19 (excluding)
Flash_playerAdobe11.2 (including)11.2.202.233 (including)
Supplementary for Red Hat Enterprise Linux 5RedHatflash-plugin-0:10.3.183.19-1.el5*
Supplementary for Red Hat Enterprise Linux 6RedHatflash-plugin-0:10.3.183.19-1.el6*
Adobe-flashpluginUbuntuhardy*
Adobe-flashpluginUbuntulucid*
Adobe-flashpluginUbuntunatty*
Adobe-flashpluginUbuntuoneiric*
Adobe-flashpluginUbuntuprecise*
Adobe-flashpluginUbuntuupstream*
Flashplugin-nonfreeUbuntudevel*
Flashplugin-nonfreeUbuntuhardy*
Flashplugin-nonfreeUbuntulucid*
Flashplugin-nonfreeUbuntunatty*
Flashplugin-nonfreeUbuntuoneiric*
Flashplugin-nonfreeUbuntuprecise*
Flashplugin-nonfreeUbuntuupstream*

References