CVE-2012-5275
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.
- Record
CVE-2012-5275- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.
- Record
CVE-2012-5275- Updated
- 2026-11-02
EUVDEUVD-2012-5198 No score
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.
- Record
EUVD-2012-5198- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-452p-q6qj-235g No score
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows...
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.
- Record
GHSA-452p-q6qj-235g- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:11.2.202.251-1.el5 | 0:11.2.202.251-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:11.2.202.251-1.el5 | 0:11.2.202.251-1.el5 |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 7 CVEs |
before 0:11.2.202.251-1.el6 | 0:11.2.202.251-1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5275 is a high vulnerability (CVSS 10.0) in Adobe Air, published November 7, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.6%, the 95th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html
rhn.redhat.com/errata/RHSA-2012-1431.html
secunia.com/advisories/51245
securitytracker.com/id?1027730
exchange.xforce.ibmcloud.com/vulnerabilities/79846
Show 32 moreShow less
adobe.com/support/security/bulletins/apsb12-24.html
nvd.nist.gov/vuln/detail/CVE-2012-5275
github.com/advisories/GHSA-452p-q6qj-235g
access.redhat.com/errata/RHSA-2012:1431
bugzilla.redhat.com/show_bug.cgi?id=873818
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1431.json
cve.org/CVERecord?id=CVE-2012-5274