CVE-2012-0754: adobe flash player

csirt@kutim:~/threat-intel/cve/CVE-2012-0754

CVSS 8.1 · High KEV · sudah dieksploitasi EPSS 91,1%

Kerentanan Out-of-bounds Write pada adobe flash player. Skor CVSS 3.1 8.1 (High) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Rincian

Terbit di NVD: 16 Februari 2012
Terakhir diubah: 16 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-787: Out-of-bounds Write
EPSS (30 hari): 91,1% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Adobe Flash Player Memory Corruption Vulnerability
Masuk KEV: 8 Juni 2022
Tenggat CISA: 22 Juni 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
adobe	flash player	Semua versi sebelum 10.3.183.15
adobe	flash player	Versi 11.0 hingga sebelum 11.1.102.62
adobe	flash player	Semua versi sebelum 11.1.111.6
adobe	flash player	Semua versi sebelum 11.1.115.6

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://www.adobe.com/support/security/bulletins/apsb12-03.html broken link · patch · advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0754 pemerintah AS
http://rhn.redhat.com/errata/RHSA-2012-0144.html advisory pihak ketiga
http://security.gentoo.org/glsa/glsa-201204-07.xml advisory pihak ketiga
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15030 advisory pihak ketiga
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15973 advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html broken link
http://secunia.com/advisories/48265 broken link
http://secunia.com/advisories/48819 broken link
https://github.com/cisagov/vulnrichment/issues/196 issue tracking

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.