CVE-2012-1535highunder attackCWE-20CWE-94

CVE-2012-1535

Published · Updated

Follow this CVE+ Monitor Flash Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.8epss 70%
from disclosure to weapon5 days
Published on NVDAug 15
1st PoC+5d
metasploitAug 9
CISA KEV+3487d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
5 products
Red Hat Enterprise Linux Desktop Supplementary (v. 5) · Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 5) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-03-24

The impacted product is end-of-life and should be disconnected if still in use.

In short

Adobe Flash Player had a flaw that allowed attackers to run malicious code or crash the application by sending specially crafted Flash files. This vulnerability was actively exploited in real attacks during August 2012, including through Flash files embedded in Word documents.

Technical detail

Unspecified input validation flaw (CWE-20) in Adobe Flash Player versions prior to 11.3.300.271 (Windows/Mac) and 11.2.202.238 (Linux) permits remote code execution or denial of service through maliciously crafted SWF files. Attack vector is network-based with low complexity; no authentication required. Exploitation was observed in the wild via SWF content embedded in Office documents.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.