Lucene search

K
cve[email protected]CVE-2012-5285
HistoryNov 13, 2012 - 1:39 p.m.

CVE-2012-5285

2012-11-1313:39:47
CWE-119
web.nvd.nist.gov
27
cve-2012-5285
buffer overflow
adobe flash player
adobe air
security vulnerability
apsb12-22
arbitrary code execution
nvd

7.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.028 Low

EPSS

Percentile

90.6%

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Affected configurations

NVD
Node
adobeflash_playerRange10.310.3.183.29
OR
adobeflash_playerRange11.411.4.402.287
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange10.310.3.183.29
OR
adobeflash_playerRange11.211.2.202.243
AND
linuxlinux_kernelMatch-
Node
adobeflash_playerRange11.111.1.111.19
AND
googleandroidRange2.02.3.7
OR
googleandroidRange3.03.2.6
Node
adobeflash_playerRange11.111.1.115.20
AND
googleandroidRange4.04.4.4
Node
adobeairRange<3.4.0.2710
OR
adobeair_sdkRange<3.4.0.2710

7.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.028 Low

EPSS

Percentile

90.6%