CVE-2012-0767: adobe flash player

csirt@kutim:~/threat-intel/cve/CVE-2012-0767

CVSS 6.1 · Medium KEV · sudah dieksploitasi EPSS 6,2%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada adobe flash player. Skor CVSS 3.1 6.1 (Medium) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)," as exploited in the wild in February 2012.

Rincian

Terbit di NVD: 16 Februari 2012
Terakhir diubah: 16 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari): 6,2% peluang dieksploitasi; lebih tinggi dari 93,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Masuk KEV: 8 Juni 2022
Tenggat CISA: 22 Juni 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
adobe	flash player	Semua versi sebelum 10.3.183.15
adobe	flash player	Versi 11.0 hingga sebelum 11.1.102.62
adobe	flash player	Semua versi sebelum 11.1.111.6
adobe	flash player	Semua versi sebelum 11.1.115.6

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://www.adobe.com/support/security/bulletins/apsb12-03.html broken link · patch · advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0767 pemerintah AS
http://rhn.redhat.com/errata/RHSA-2012-0144.html advisory pihak ketiga
http://security.gentoo.org/glsa/glsa-201204-07.xml advisory pihak ketiga
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14806 advisory pihak ketiga
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15933 advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html broken link
http://secunia.com/advisories/48265 broken link
http://secunia.com/advisories/48819 broken link

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.