01 Record
CVE-2012-5054
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
HighKEVPUBLISHEDCNA: adobe
CNA base score8.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
02 Description
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
03 Exploitation and scoring
- Exploitation
- Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2022-06-08. Federal remediation due 2022-06-22.
- SSVC decision
- ExploitationactiveCISA reports credible evidence of active exploitation.
- AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
- Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.
- EPSS probability
- 21.19% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 97.3% of scored records. A rank, not a probability.
- NVD base score
- 8.8 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVD analysis status
- Analyzed. NVD last modified this record on 2026-06-16.
- Red Hat severity
- Critical. Red Hat's rating for its own products, not a CVSS rating.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2012-09-24 17:00Z14 YR AGO
- Last updated
- 2025-10-22 00:05Z1 YR AGO
- Reserved
- 2012-09-21
- Assigning CNA
- adobe
- Record state
- PUBLISHED
- Severity
- High (CVSS 8.8)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-190Integer Overflow or WraparoundBase
- Data version
- 5.1
- Document digest
- 4414ad58b3612e5c521e946498e1cc803714aa79c766824edd29101c4885ffd1
05 Affected products
06 References
- www.adobe.comhttp://www.adobe.com/support/security/bulletins/apsb12-19.html
- packetstormsecurity.orghttp://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
- exchange.xforce.ibmcloud.comadobe-flash-matrix3d-overflow(78866)https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
- www.vupen.comhttp://www.vupen.com/english/services/ba-index.php
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054