CVE-2012-5054
High 8.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Adobe Flash Player Integer Overflow Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
Description
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
Metrics
- CVSS 3.1
-
8.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 21% (percentile: 98) as of 1 November 2026
- CWE
- CWE-190
Affected products
adobe: flash player
References
- http://www.adobe.com/support/security/bulletins/apsb12-19.html Not ApplicableVendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb12-19.html Not ApplicableVendor Advisory
- http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer… ExploitThird Party Advisory
- http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer… ExploitThird Party Advisory
- http://www.vupen.com/english/services/ba-index.php Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78866 Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/services/ba-index.php Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78866 Third Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012… US Government Resource