CVE-2012-5054

adobe flash player

Published 24 Sept 2012 · updated 16 Jun 2026 · Analyzed

8.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 8 Jun 2022, with a remediation deadline of 22 Jun 2022 for US federal agencies.

Required action: The impacted product is end-of-life and should be disconnected if still in use.

Description

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

References

packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html · Exploit, Third Party Advisory
www.adobe.com/support/security/bulletins/apsb12-19.html · Not Applicable, Vendor Advisory
www.vupen.com/english/services/ba-index.php · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/78866 · Third Party Advisory, VDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054 · US Government Resource