High severity · published Sep 24, 2012
CVE-2012-5054
Adobe Flash Player Integer Overflow Vulnerability
In wildKEV
8.8
CVSS
21.2%
EPSS
Yes
On KEV
Description
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)21.2% · higher than 98% of CVEs
Exploited in the wildYes
CISA KEVListed Jun 8, 2022
Federal remediation dueJun 22, 2022
Ransomware campaign useNot known
Affected products
Which versions
FP
Flash Player · Adobe
before 11.4.402.265 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5054
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5054
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
http://www.adobe.com/support/security/bulletins/apsb12-19.html
x_refsource_MISC
http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
vdb-entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
x_refsource_MISC
http://www.vupen.com/english/services/ba-index.php
More from Flash Player
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-1019
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2015-5123
Adobe Flash Player Use-After-Free Vulnerability
9.8
CVE-2015-5122
Adobe Flash Player Use-After-Free Vulnerability