CVE-2012-5276

2012-11-0705:41:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2012-5276

buffer overflow

adobe flash player

security vulnerability

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.9%

JSON

Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerlt10.3.183.43
adobe:flash_playeradobe flash playerlt11.5.502.110
adobe:flash_playeradobe flash playerlt11.2.202.251
adobe:flash_playeradobe flash playerlt11.1.111.24
adobe:flash_playeradobe flash playerlt11.1.115.27
adobe:airadobe airlt3.5.0.600
adobe:air_sdkadobe air sdklt3.5.0.600

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	lt	10.3.183.43
adobe:flash_player	adobe flash player	lt	11.5.502.110
adobe:flash_player	adobe flash player	lt	11.2.202.251
adobe:flash_player	adobe flash player	lt	11.1.111.24
adobe:flash_player	adobe flash player	lt	11.1.115.27
adobe:air	adobe air	lt	3.5.0.600
adobe:air_sdk	adobe air sdk	lt	3.5.0.600