CVE-2012-0767

Publication date 16 February 2012

Last updated 25 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

6.1 · Medium

Score breakdown

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)," as exploited in the wild in February 2012.

Status

Package Ubuntu Release Status
adobe-flashplugin 11.10 oneiric
Fixed 11.1.102.62-0oneiric1
11.04 natty
Fixed 11.1.102.62-0natty1
10.10 maverick
Fixed 11.1.102.62-0maverick1
10.04 LTS lucid
Fixed 11.1.102.62-0lucid1
8.04 LTS hardy Ignored end of life
flashplugin-nonfree 11.10 oneiric
Fixed 11.1.102.62ubuntu0.11.10.1
11.04 natty
Fixed 11.1.102.62ubuntu0.11.04.1
10.10 maverick
Fixed 11.1.102.62ubuntu0.10.10.1
10.04 LTS lucid
Fixed 11.1.102.62ubuntu0.10.04.1
8.04 LTS hardy Ignored end of life

Severity score breakdown

Parameter Value
Base score 6.1 · Medium
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Scope Changed
Confidentiality Low
Integrity impact Low
Availability impact None
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

Other references