CVE-2012-5054

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 21,2%

Kerentanan Integer Overflow or Wraparound pada adobe flash player. Skor CVSS 3.1 8.8 (High) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Rincian

Terbit di NVD

24 September 2012

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

21,2% peluang dieksploitasi; lebih tinggi dari 97,5% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Adobe Flash Player Integer Overflow Vulnerability

Masuk KEV

8 Juni 2022

Tenggat CISA

22 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.adobe.com/support/security/bulletins/apsb12-19.html not applicable · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054 pemerintah AS
• http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html exploit · advisory pihak ketiga
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78866 advisory pihak ketiga · vdb entry
• http://www.vupen.com/english/services/ba-index.php broken link