CVE

Id
54010  
CVE No.
CVE-2012-0767  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)," as exploited in the wild in February 2012.  
Phase
Assigned (20120118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
568260 54010 CVE-2012-0767 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb12-03.html  View
568261 54010 CVE-2012-0767 GENTOO:GLSA-201204-07  View
568262 54010 CVE-2012-0767 URL:http://security.gentoo.org/glsa/glsa-201204-07.xml  View
568263 54010 CVE-2012-0767 REDHAT:RHSA-2012:0144  View
568264 54010 CVE-2012-0767 URL:http://rhn.redhat.com/errata/RHSA-2012-0144.html  View
568265 54010 CVE-2012-0767 SUSE:openSUSE-SU-2012:0265  View
568266 54010 CVE-2012-0767 URL:http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html  View
568267 54010 CVE-2012-0767 OVAL:oval:org.mitre.oval:def:14806  View
568268 54010 CVE-2012-0767 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14806  View
568269 54010 CVE-2012-0767 OVAL:oval:org.mitre.oval:def:15933  View
568270 54010 CVE-2012-0767 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15933  View
568271 54010 CVE-2012-0767 SECUNIA:48819  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26246 JVNDB-2012-001953 Windows 上で稼働する Adobe Flash Player および AIR における任意のコードを実行される脆弱性 Windows 上で稼働する Adobe Flash Player および AIR の ActiveX コントロールは、URL セキュリティドメインの確認を適切に行わないため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2012-0772 54010 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001953.html  View