CVE-2012-5054
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
- Score
- CVSS 3.1 8.8 High
- Status
- Analyzed - psirt@adobe.com
- Published
- 2012-09-24
- Last modified
- 2025-10-22
- Known exploited (CISA KEV)
- since 2022-06-08, action due 2022-06-22: The impacted product is end-of-life and should be disconnected if still in use.
- Weaknesses
- CWE-190
Affected products
References
- http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
- http://www.adobe.com/support/security/bulletins/apsb12-19.html
- http://www.vupen.com/english/services/ba-index.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054
