Junglewise Threat Intelligence

CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability

CVE-2012-0767 · Severity: critical · CVSS 6.1 · Exploited in the wild · Published 2022-06-08

Technologies: Adobe Flash Player, Adobe AIR. Vendors: Adobe.

Executive brief

Adobe Flash Player contains a Universal Cross-Site Scripting (UXSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability was notably exploited in the wild in February 2012.

Affected products

  • Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x

Timeline

  • 2012-02: exploited: Exploited in the wild in February 2012.
  • 2012-02-15: advisory: Adobe Security Bulletin APSB12-03 published.
  • 2022-06-08: kev added: Added to CISA Known Exploited Vulnerabilities Catalog.

Related threats