cyfenced.com →

[ CVE-2012-0754 · Published 16 Feb 2012 ]

Adobe Flash Player Memory Corruption Vulnerability

Exploited · CISA KEV CVSS 8.1 EPSS 91%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-06-08
  • EPSS: 91% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

CISA: Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 22 Jun 2022): The impacted product is end-of-life and should be disconnected if still in use.

[ References ]References