CVE-2012-2040 describes an untrusted search path vulnerability in the installer for Adobe Flash Player and Adobe AIR across Windows, Mac OS X, Linux, and Android platforms. This flaw allows a local attacker to elevate privileges by placing a malicious executable in an unspecified directory, which the installer then executes. With a CVSS score of 9.3, this vulnerability is considered critical due to its high impact on confidentiality, integrity, and availability, requiring medium attack complexity but no authentication. While no active exploitation, public exploit code, or significant community discussion has been identified, the FAUCET Risk Score of 75/100 indicates a notable potential risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 11.2.202.235CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
<= 11.1.115.8CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
<= 11.1.111.9CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
<= 3.2.0.2070CPE matchmatch criteria | cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* | ||
11.4CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.