CVE-2012-2040

Publication date 9 June 2012

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
adobe-flashplugin 12.04 LTS precise
Fixed 11.2.202.236-0precise1
11.10 oneiric
Fixed 11.2.202.236-0oneiric1
11.04 natty
Fixed 11.2.202.236-0natty1
10.04 LTS lucid
Fixed 11.2.202.236-0lucid1
8.04 LTS hardy Ignored end of life
flashplugin-nonfree 12.04 LTS precise
Fixed 11.2.202.236ubuntu0.12.04.1
11.10 oneiric
Fixed 11.2.202.236ubuntu0.11.10.1
11.04 natty
Fixed 11.2.202.236ubuntu0.11.04.1
10.04 LTS lucid
Fixed 11.2.202.236ubuntu0.10.04.1
8.04 LTS hardy Ignored end of life

References

Other references