CVE-2012-5276
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.
- Record
CVE-2012-5276- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.
- Record
CVE-2012-5276- Updated
- 2026-11-02
EUVDEUVD-2012-5199 No score
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.
- Record
EUVD-2012-5199- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vc8g-cm6p-45c8 No score
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.
- Record
GHSA-vc8g-cm6p-45c8- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:5::client |
before 0:11.2.202.251-1.el5 | 0:11.2.202.251-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server |
before 0:11.2.202.251-1.el5 | 0:11.2.202.251-1.el5 |
flash-pluginRed Hat:rhel_extras:6 |
before 0:11.2.202.251-1.el6 | 0:11.2.202.251-1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5276 is a high vulnerability (CVSS 10.0) in Adobe Air, published November 7, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.6%, the 95th percentile. Fixed in flash-plugin 0:11.2.202.251-1.el5.
References
lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html
rhn.redhat.com/errata/RHSA-2012-1431.html
secunia.com/advisories/51245
securitytracker.com/id?1027730
Show 32 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/79847
adobe.com/support/security/bulletins/apsb12-24.html
nvd.nist.gov/vuln/detail/CVE-2012-5276
github.com/advisories/GHSA-vc8g-cm6p-45c8
access.redhat.com/errata/RHSA-2012:1431
bugzilla.redhat.com/show_bug.cgi?id=873818
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1431.json
cve.org/CVERecord?id=CVE-2012-5274