CVE-2012-0754highunder attack

CVE-2012-0754

Published · Updated

Follow this CVE+ Monitor Flash Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.8epss 91%
from disclosure to weapon21 days
Published on NVDFeb 16
1st PoC+21d
metasploitFeb 15
CISA KEV+3765d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
5 products
Red Hat Enterprise Linux Desktop Supplementary (v. 5) · Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 5) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-06-22

The impacted product is end-of-life and should be disconnected if still in use.

In short

Adobe Flash Player has a flaw that allows attackers to run malicious code or crash your browser by exploiting memory issues. This affects millions of users across Windows, Mac, Linux, and Android devices.

Technical detail

CVE-2012-0754 is a memory corruption vulnerability in Adobe Flash Player that permits arbitrary code execution or denial of service through unspecified attack vectors. The vulnerability affects multiple versions across Windows, Mac OS X, Linux, Solaris, and Android platforms, with different patch thresholds per platform.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.