Every CVESearch/Get API key

CVE-2012-5054

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before...

8.8 HighIn KEV

CVE-2012-5054 is a high vulnerability (CVSS 8.8) in Adobe Flash Player, published September 24, 2012. CISA lists it as known to be exploited, since June 8, 2022. EUVD reports exploitation since June 8, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 21.2%, the 97th percentile. No source names a fixed version.

What does this mean?
Severity
8.8 HighCVSS 3.1, NVD
Exploit chance
21.2%EPSS, 97th percentile
Exploitation
ExploitedCISA KEV,
Fixed in
No fix listedNo source names one

Description

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

21.2%Up 14.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-plugin
Red Hat:rhel_extras:6
From an advisory covering 8 CVEs
before 0:11.2.202.238-1.el6
0:11.2.202.238-1.el6
flash-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 8 CVEs
before 0:11.2.202.238-1.el5
0:11.2.202.238-1.el5
flash-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 8 CVEs
before 0:11.2.202.238-1.el5
0:11.2.202.238-1.el5

What each source reports

NVD Score used8.8

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Record
CVE-2012-5054
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-190
Updated
2026-11-02
CVE List8.8

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Record
CVE-2012-5054
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2012-49788.8

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Record
EUVD-2012-4978
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-xxxm-q6xf-58pf8.8

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before...

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Record
GHSA-xxxm-q6xf-58pf
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
CISA KEVNo score

Adobe Flash Player Integer Overflow Vulnerability

Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.

Record
CVE-2012-5054
Weakness
CWE-189
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
exploitation
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 35 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open