CVE-2012-0779
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and...
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
Exploit likelihood
What each source reports
NVD Score used
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
- Record
CVE-2012-0779- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
- Record
CVE-2012-0779- Updated
- 2026-11-02
EUVDEUVD-2012-0811 No score
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
- Record
EUVD-2012-0811- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-52cx-xfmv-v52g No score
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and...
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
- Record
GHSA-52cx-xfmv-v52g- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:5::client |
before 0:10.3.183.19-1.el5 | 0:10.3.183.19-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server |
before 0:10.3.183.19-1.el5 | 0:10.3.183.19-1.el5 |
flash-pluginRed Hat:rhel_extras:6 |
before 0:10.3.183.19-1.el6 | 0:10.3.183.19-1.el6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Adobe Flash Player - Object Type Confusion (Metasploit) | 2012-06-25 |
| Metasploit | Adobe Flash Player Object Type Confusion | 2012-05-04 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0779 is a high vulnerability (CVSS 9.3) in Adobe Flash Player, published May 4, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 87.1%, the 99th percentile. Fixed in flash-plugin 0:10.3.183.19-1.el5.
References
securitytracker.com/id?1027023
lists.opensuse.org/opensuse-security-announce/2012-05/msg00005.html
securityfocus.com/bid/53395
secunia.com/advisories/49096
rhn.redhat.com/errata/RHSA-2012-0688.html
osvdb.org/81656
Show 12 moreShow less
adobe.com/support/security/bulletins/apsb12-09.html
exchange.xforce.ibmcloud.com/vulnerabilities/75383
nvd.nist.gov/vuln/detail/CVE-2012-0779
github.com/advisories/GHSA-52cx-xfmv-v52g
access.redhat.com/errata/RHSA-2012:0688
bugzilla.redhat.com/show_bug.cgi?id=819003
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0688.json
cve.org/CVERecord?id=CVE-2012-0779