CVE-2012-5054

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute...

Basic Information

CVE State: PUBLISHED
Reserved Date: September 21, 2012
Published Date: September 24, 2012
Last Updated: February 04, 2025
Vendor: n/a
Product: n/a
Description: Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

CVSS Scores

CVSS v3.1

8.8 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2022-06-08 00:00:00 UTC) Source

References

http://www.adobe.com/support/security/bulletins/apsb12-19.html http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html https://exchange.xforce.ibmcloud.com/vulnerabilities/78866 http://www.vupen.com/english/services/ba-index.php

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-06-08 00:00:00 UTC