Lucene search

AdobeCVE-2012-5285

HistoryNov 13, 2012 - 1:39 p.m.

CVE-2012-5285

2012-11-1313:39:47

CWE-119

adobe

web.nvd.nist.gov

cve-2012-5285

buffer overflow

adobe flash player

adobe air

security vulnerability

apsb12-22

arbitrary code execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.028

Percentile

90.6%

JSON

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Affected configurations

Nvd

Node

adobeflash_playerRange10.3–10.3.183.29

adobeflash_playerRange11.4–11.4.402.287

AND

applemac_os_xMatch-

microsoftwindowsMatch-

Node

adobeflash_playerRange10.3–10.3.183.29

adobeflash_playerRange11.2–11.2.202.243

AND

linuxlinux_kernelMatch-

Node

adobeflash_playerRange11.1–11.1.111.19

AND

googleandroidRange2.0–2.3.7

googleandroidRange3.0–3.2.6

Node

adobeflash_playerRange11.1–11.1.115.20

AND

googleandroidRange4.0–4.4.4

Node

adobeairRange<3.4.0.2710

adobeair_sdkRange<3.4.0.2710

VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
applemac_os_x-cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
adobeair*cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
adobeair_sdk*cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	flash_player	*	cpe:2.3:a:adobe:flash_player::::::::
apple	mac_os_x	-	cpe:2.3:o:apple:mac_os_x:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
google	android	*	cpe:2.3:o:google:android::::::::
adobe	air	*	cpe:2.3:a:adobe:air::::::::
adobe	air_sdk	*	cpe:2.3:a:adobe:air_sdk::::::::