Adobe · Flash Player
CVE-2012-2034
Adobe Flash Player Memory Corruption Vulnerability
무엇인가
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.
CISA: Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).
할 일
The impacted product is end-of-life and should be disconnected if still in use.
미국 연방 기관 조치 기한: 2022년 4월 18일
Adobe의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2024. 9. 17. | Incorrect Default Permissions | Flash Player | 높음 8.8 | 11% |
| 2024. 9. 17. | Code Execution | Flash Player | 높음 8.8 | 11% |
| 2024. 9. 17. | Integer Underflow Vulnerablity | Flash Player | 높음 8.8 | 99.9% |
| 2024. 9. 17. | Double Free Vulnerablity | Flash Player | 높음 8.8 | 25% |
| 2022. 6. 8. | Memory Corruption | Flash Player | 높음 7.8 | 83% |
| 2022. 6. 8. | Unspecified | Flash Player | 높음 7.8 | 64% |
| 2022. 6. 8. | Memory Corruption | Flash Player | 높음 7.8 | 91% |
| 2022. 6. 8. | Cross-Site Scripting (XSS) | Flash Player | 보통 6.1 | 6.2% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.