ZeroDay Findings
Sign inSign up

Findings

CVE-2012-2034

Adobe Flash Player Memory Corruption Vulnerability

Published Jun 8, 2012 · updated Jun 16, 2026 · adobe flash player

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 8, 2012 · Catalog

    Detected

    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnera

  2. Mar 28, 2022 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Apr 18, 2022 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnera

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Apr 18, 2022

Affected

  • cpe adobe/airversion unspecified
  • cpe adobe/flash playerversion unspecified
  • cpe opensuse/opensuse11.4
  • cpe opensuse/opensuse12.1
  • cpe redhat/enterprise linux desktop5.0
  • cpe suse/linux enterprise desktop10
  • cpe suse/linux enterprise desktop11
  • vendor Adobe Flash Playerversion unspecified

Sources

  • CISA KEVCVE-2012-2034

    Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).

    cisa.gov
  • CVE.orgCVE-2012-2034

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2012-2034

    30-day exploitation probability 7.7%

    first.org
  • NIST NVDCVE-2012-2034

    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers

    nvd.nist.gov

References

CVE-2012-2034 · ZeroDay Findings