CVE-2012-0754

CVSS 7.8 HIGHEPSS 92.0%● KEV

In short

Adobe Flash Player has a flaw that allows attackers to run malicious code or crash your browser by exploiting memory issues. This affects millions of users across Windows, Mac, Linux, and Android devices.

Technical detail

CVE-2012-0754 is a memory corruption vulnerability in Adobe Flash Player that permits arbitrary code execution or denial of service through unspecified attack vectors. The vulnerability affects multiple versions across Windows, Mac OS X, Linux, Solaris, and Android platforms, with different patch thresholds per platform.

Summary generated and translated by AI from the official description.

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/18572unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html http://rhn.redhat.com/errata/RHSA-2012-0144.html http://secunia.com/advisories/48265 http://secunia.com/advisories/48819 http://security.gentoo.org/glsa/glsa-201204-07.xml https://github.com/cisagov/vulnrichment/issues/196 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15030 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15973 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0754 http://www.adobe.com/support/security/bulletins/apsb12-03.html