CVE-2012-5676 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe AIR

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources

Severity

10.0CRITICALNVD

EPSS

4.5%

top 10.86%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe AIR Adobe AIR SDK Adobe Flash Player

Timeline

PublishedDec 12

Latest updateMay 14

Description

Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via uns…

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDadobe/flash_player10.3 — 10.3.183.48+5

▶NVDadobe/air< 3.5.0.880+1

▶NVDadobe/air_sdk< 3.5.0.880+1

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-x4m6-74jr-fpc9: Buffer overflow in Adobe Flash Player before 10↗2022-05-14

▶

CVEList

CVE-2012-5676: Buffer overflow in Adobe Flash Player before 10↗2012-12-12

▶

📋Vendor Advisories

Red Hat

flash-plugin: multiple code execution flaws (APSB12-27)↗2012-12-11

▶

💬Community

Bugzilla

CVE-2012-5676 CVE-2012-5677 CVE-2012-5678 flash-plugin: multiple code execution flaws (APSB12-27)↗2012-12-11

▶