CVE-2012-1535

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 70,4%

Kerentanan Improper Input Validation pada adobe flash player, redhat enterprise linux desktop +4 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 3 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Rincian

Terbit di NVD

15 Agustus 2012

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

70,4% peluang dieksploitasi; lebih tinggi dari 99,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Adobe Flash Player Arbitrary Code Execution Vulnerability

Masuk KEV

3 Maret 2022

Tenggat CISA

24 Maret 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.adobe.com/support/security/bulletins/apsb12-18.html not applicable · patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1535 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00010.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00012.html mailing list · advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2012-1203.html advisory pihak ketiga
• http://security.gentoo.org/glsa/glsa-201209-01.xml advisory pihak ketiga
• http://marc.info/?l=bugtraq&m=139455789818399&w=2 mailing list