VULNERABILITY INTELLIGENCE

CVE-2012-5054

CVSS score8.8 HIGH

EPSS probability21.19%

CISA KEVKnown exploited vulnerability

Published2012-09-24

Last modified2026-06-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Adobe Flash Player Integer Overflow Vulnerability

Vendor / product: Adobe / Flash Player

Description

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Weakness classification

CWE-190: Integer Overflow or Wraparound

Primary references

psirt@adobe.com — Exploit, Third Party Advisory
psirt@adobe.com — Not Applicable, Vendor Advisory
psirt@adobe.com — Broken Link
psirt@adobe.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource