CVE-2012-5054
8.8
HIGH
CVSS 3.1
EPSS 21.2% · 98th pctCISA KEV · Exploited in the wild
2012-09-24•Updated 2025-10-22•KEV 2022-06-08
CISA Known Exploited Vulnerabilities
Adobe Flash Player Integer Overflow Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.
Added to KEV
2022-06-08
Remediation due
2022-06-22
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2012-5054
Description
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
Severity
CVSS 3.1 · CISA8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSSVC · CISA-ADP
Exploitationactive
Automatableno
Technical impacttotal
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| - | - | n/a |
References
4 LinksRecord Details
Published
2012-09-24
Last updated
2025-10-22
Assigner (CNA)
adobe
Credited to
-
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.