CVE-2012-5276 Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2...
HighCVSS 10.0
EPSS 10.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | >= 10.3, < 10.3.183.43 | 10.3.183.43 |
| Adobe flash player | >= 11.4, < 11.5.502.110 | 11.5.502.110 |
| Adobe flash player | >= 11.2, < 11.2.202.251 | 11.2.202.251 |
| Adobe flash player | >= 11.1, < 11.1.111.24 | 11.1.111.24 |
| Adobe flash player | >= 11.1, < 11.1.115.27 | 11.1.115.27 |
| Adobe air | < 3.5.0.600 | 3.5.0.600 |
| Adobe air sdk | < 3.5.0.600 | 3.5.0.600 |
References
- openSUSE-SU-2012:1480 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:1485 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0134 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0367 mailing-list third-party-advisory vendor-advisory
- RHSA-2012:1431 third-party-advisory vendor-advisory
- 51186 third-party-advisory
- 51207 third-party-advisory
- 51213 third-party-advisory
- 51245 third-party-advisory
- www.adobe.com patch vendor-advisory
- 1027730 third-party-advisory vdb-entry
- adobe-cve20125276-bo(79847) vdb-entry