CVE-2012-1535 Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of serv...
HighCVSS 7.8
EPSS 70.4%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | < 11.3.300.271 | 11.3.300.271 |
| Adobe flash player | < 11.2.202.238 | 11.2.202.238 |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
References
- openSUSE-SU-2012:0996 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:1001 mailing-list third-party-advisory vendor-advisory
- HPSBMU02948 mailing-list vendor-advisory
- RHSA-2012:1203 third-party-advisory vendor-advisory
- GLSA-201209-01 third-party-advisory vendor-advisory
- www.adobe.com not-applicable patch vendor-advisory
- www.cisa.gov government-resource us-government-resource