CVE-2012-5054 Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
HighCVSS 8.8
EPSS 21.2%
CISA KEV
added 2022-06-08 · due 2022-06-22
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
CISA Known Exploited Vulnerability
- Date added
- 2022-06-08
- Due date (FCEB)
- 2022-06-22
- Ransomware use
- Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | < 11.4.402.265 | 11.4.402.265 |
References
- packetstormsecurity.org exploit third-party-advisory
- www.adobe.com not-applicable vendor-advisory
- www.vupen.com broken-link
- adobe-flash-matrix3d-overflow(78866) third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource