CVE-2012-5279: Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android…

Unscored severity · published Nov 7, 2012

CVE-2012-5279

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android…

–

CVSS

6.6%

EPSS

No

On KEV

Description

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Exploitation

Is it being used?

Exploit prediction (EPSS)6.6% · higher than 94% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AI

Air · Adobe

before 3.5.0.600 · source: NVD

AS

Air Sdk · Adobe

before 3.5.0.600 · source: NVD

FP

Flash Player · Adobe

10.3 before 10.3.183.43; 11.4 before 11.5.502.110; 10.3 before 10.3.183.43; 11.2 before 11.2.202.251; 11.1 before 11.1.111.24; 11.1 before 11.1.115.27 · source: NVD

Affected product

AI

Air

Adobe

All Air CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2012-5279

CVE.org

https://www.cve.org/CVERecord?id=CVE-2012-5279

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html