Log in Start free

Actively exploited · Published Jun 9, 2012 · Assigned by adobe

CVE-2012-2034

High 7.5 Exploited

In plain English

A high-severity memory corruption in Flash Player from Adobe. Attackers are actively exploiting it in the wild (listed by CISA on March 28, 2022). The chance it is exploited in the next 30 days is estimated at 7.7% (higher than 95% of all known vulnerabilities). The impacted product is end-of-life and should be disconnected if still in use.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)7.7%top 5.4% of all CVEs
Exploited in the wildYesCISA KEV since Mar 28, 2022
Attack toolingNoneno public tooling known

CISA guidance

The impacted product is end-of-life and should be disconnected if still in use.

Federal agencies must remediate by Apr 18, 2022.

Official description

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References