Lucene search

K
cve[email protected]CVE-2012-5278
HistoryNov 07, 2012 - 5:41 a.m.

CVE-2012-5278

2012-11-0705:41:22
CWE-264
web.nvd.nist.gov
124
cve-2012-5278
adobe flash player
security vulnerability
adobe air
nvd
arbitrary code execution
access restriction bypass
cve

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.2%

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.

Affected configurations

NVD
Node
adobeflash_playerRange10.310.3.183.43
OR
adobeflash_playerRange11.411.5.502.110
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange10.310.3.183.43
OR
adobeflash_playerRange11.211.2.202.251
AND
linuxlinux_kernelMatch-
Node
adobeflash_playerRange11.111.1.111.24
AND
googleandroidRange2.02.3.7
OR
googleandroidRange3.03.2.6
Node
adobeflash_playerRange11.111.1.115.27
AND
googleandroidRange4.04.4.4
Node
adobeairRange<3.5.0.600
OR
adobeair_sdkRange<3.5.0.600

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.014 Low

EPSS

Percentile

86.2%