high8.8Known exploited
CVE-2012-5054
Adobe Flash Player Integer Overflow Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-06-08. Federal due date: 2022-06-22.
The impacted product is end-of-life and should be disconnected if still in use.
Impact
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | before 11.4.402.265 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
- http://www.adobe.com/support/security/bulletins/apsb12-19.html
- http://www.vupen.com/english/services/ba-index.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
- http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
- http://www.adobe.com/support/security/bulletins/apsb12-19.html
- http://www.vupen.com/english/services/ba-index.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054