CVE-2012-5054

Summary

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.adobe.com/support/security/bulletins/apsb12-19.html
• http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
• http://www.vupen.com/english/services/ba-index.php

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: no
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054

References

• http://www.adobe.com/support/security/bulletins/apsb12-19.html
• http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
• http://www.vupen.com/english/services/ba-index.php

• ←Previous
• Next→