CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability

First published: Mon Sep 24 2012(Updated: )

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Credit: psirt@adobe.com psirt@adobe.com

Affected Software	Affected Version	How to fix
Adobe Flash Player	<=11.3.300.271
Adobe Flash Player	=2
Adobe Flash Player	=3
Adobe Flash Player	=4
Adobe Flash Player	=5
Adobe Flash Player	=6
Adobe Flash Player	=6.0.21.0
Adobe Flash Player	=6.0.79
Adobe Flash Player	=7.0
Adobe Flash Player	=7.0.1
Adobe Flash Player	=7.0.14.0
Adobe Flash Player	=7.0.19.0
Adobe Flash Player	=7.0.24.0
Adobe Flash Player	=7.0.25
Adobe Flash Player	=7.0.53.0
Adobe Flash Player	=7.0.60.0
Adobe Flash Player	=7.0.61.0
Adobe Flash Player	=7.0.63
Adobe Flash Player	=7.0.66.0
Adobe Flash Player	=7.0.67.0
Adobe Flash Player	=7.0.68.0
Adobe Flash Player	=7.0.69.0
Adobe Flash Player	=7.0.70.0
Adobe Flash Player	=7.0.73.0
Adobe Flash Player	=7.0_r67
Adobe Flash Player	=7.1
Adobe Flash Player	=7.1.1
Adobe Flash Player	=7.2
Adobe Flash Player	=8.0
Adobe Flash Player	=8.0.22.0
Adobe Flash Player	=8.0.24.0
Adobe Flash Player	=8.0.33.0
Adobe Flash Player	=8.0.34.0
Adobe Flash Player	=8.0.35.0
Adobe Flash Player	=8.0.39.0
Adobe Flash Player	=8.0.42.0
Adobe Flash Player	=9.0
Adobe Flash Player	=9.0.8.0
Adobe Flash Player	=9.0.9.0
Adobe Flash Player	=9.0.16
Adobe Flash Player	=9.0.18d60
Adobe Flash Player	=9.0.20
Adobe Flash Player	=9.0.20.0
Adobe Flash Player	=9.0.28
Adobe Flash Player	=9.0.28.0
Adobe Flash Player	=9.0.31
Adobe Flash Player	=9.0.31.0
Adobe Flash Player	=9.0.45.0
Adobe Flash Player	=9.0.47.0
Adobe Flash Player	=9.0.48.0
Adobe Flash Player	=9.0.112.0
Adobe Flash Player	=9.0.114.0
Adobe Flash Player	=9.0.115.0
Adobe Flash Player	=9.0.124.0
Adobe Flash Player	=9.0.125.0
Adobe Flash Player	=9.0.151.0
Adobe Flash Player	=9.0.152.0
Adobe Flash Player	=9.0.155.0
Adobe Flash Player	=9.0.159.0
Adobe Flash Player	=9.0.246.0
Adobe Flash Player	=9.0.260.0
Adobe Flash Player	=9.0.262.0
Adobe Flash Player	=9.0.277.0
Adobe Flash Player	=9.0.280
Adobe Flash Player	=9.0.283.0
Adobe Flash Player	=9.125.0
Adobe Flash Player	=10
Adobe Flash Player	=10.0.0.584
Adobe Flash Player	=10.0.2.54
Adobe Flash Player	=10.0.12.10
Adobe Flash Player	=10.0.12.36
Adobe Flash Player	=10.0.15.3
Adobe Flash Player	=10.0.22.87
Adobe Flash Player	=10.0.32.18
Adobe Flash Player	=10.0.42.34
Adobe Flash Player	=10.0.45.2
Adobe Flash Player	=10.1
Adobe Flash Player	=10.1.52.14
Adobe Flash Player	=10.1.52.14.1
Adobe Flash Player	=10.1.52.15
Adobe Flash Player	=10.1.53.64
Adobe Flash Player	=10.1.82.76
Adobe Flash Player	=10.1.85.3
Adobe Flash Player	=10.1.92.8
Adobe Flash Player	=10.1.92.10
Adobe Flash Player	=10.1.95.1
Adobe Flash Player	=10.1.95.2
Adobe Flash Player	=10.1.102.64
Adobe Flash Player	=10.1.105.6
Adobe Flash Player	=10.1.106.16
Adobe Flash Player	=10.1.106.17
Adobe Flash Player	=10.2.152
Adobe Flash Player	=10.2.152.26
Adobe Flash Player	=10.2.152.32
Adobe Flash Player	=10.2.152.33
Adobe Flash Player	=10.2.153.1
Adobe Flash Player	=10.2.154.13
Adobe Flash Player	=10.2.154.25
Adobe Flash Player	=10.2.156.12
Adobe Flash Player	=10.2.157.51
Adobe Flash Player	=10.2.159.1
Adobe Flash Player	=10.3.181.14
Adobe Flash Player	=10.3.181.16
Adobe Flash Player	=10.3.181.22
Adobe Flash Player	=10.3.181.23
Adobe Flash Player	=10.3.181.26
Adobe Flash Player	=10.3.181.34
Adobe Flash Player	=10.3.183.5
Adobe Flash Player	=10.3.183.7
Adobe Flash Player	=10.3.183.10
Adobe Flash Player	=10.3.183.11
Adobe Flash Player	=10.3.183.15
Adobe Flash Player	=10.3.183.16
Adobe Flash Player	=10.3.183.18
Adobe Flash Player	=10.3.183.19
Adobe Flash Player	=10.3.183.23
Adobe Flash Player	=10.3.185.22
Adobe Flash Player	=10.3.185.24
Adobe Flash Player	=10.3.186.3
Adobe Flash Player	=10.3.186.6
Adobe Flash Player	=10.3.186.7
Adobe Flash Player	=11.0
Adobe Flash Player	=11.0.1.152
Adobe Flash Player	=11.0.1.153
Adobe Flash Player	=11.1
Adobe Flash Player	=11.1.102.55
Adobe Flash Player	=11.1.102.59
Adobe Flash Player	=11.1.102.62
Adobe Flash Player	=11.1.102.63
Adobe Flash Player	=11.1.111.8
Adobe Flash Player	=11.1.115.7
Adobe Flash Player	=11.2.202.228
Adobe Flash Player	=11.2.202.233
Adobe Flash Player	=11.2.202.235
Adobe Flash Player	=11.2.202.238
Adobe Flash Player	=11.3.300.270
Adobe Flash Player	<11.4.402.265

Remedy

The impacted product is end-of-life and should be disconnected if still in use.

Never miss a vulnerability like this again

Reference Links

collector/nvd-index
agent/type
agent/first-publish-date
agent/description
agent/event
agent/title
agent/weakness
agent/remedy
agent/author
agent/severity
exploited/true
collector/cisa-known-exploited
source/CISA
agent/software-canonical-lookup
agent/references
agent/softwarecombine
agent/tags
collector/nvd-cve
source/NVD
collector/nvd-api
agent/last-modified-date
agent/trending
vendor/adobe
canonical/adobe flash player
version/adobe flash player/11.3.300.271
version/adobe flash player/2
version/adobe flash player/3
version/adobe flash player/4
version/adobe flash player/5
version/adobe flash player/6
version/adobe flash player/6.0.21.0
version/adobe flash player/6.0.79
version/adobe flash player/7.0
version/adobe flash player/7.0.1
version/adobe flash player/7.0.14.0
version/adobe flash player/7.0.19.0
version/adobe flash player/7.0.24.0
version/adobe flash player/7.0.25
version/adobe flash player/7.0.53.0
version/adobe flash player/7.0.60.0
version/adobe flash player/7.0.61.0
version/adobe flash player/7.0.63
version/adobe flash player/7.0.66.0
version/adobe flash player/7.0.67.0
version/adobe flash player/7.0.68.0
version/adobe flash player/7.0.69.0
version/adobe flash player/7.0.70.0
version/adobe flash player/7.0.73.0
version/adobe flash player/7.0_r67
version/adobe flash player/7.1
version/adobe flash player/7.1.1
version/adobe flash player/7.2
version/adobe flash player/8.0
version/adobe flash player/8.0.22.0
version/adobe flash player/8.0.24.0
version/adobe flash player/8.0.33.0
version/adobe flash player/8.0.34.0
version/adobe flash player/8.0.35.0
version/adobe flash player/8.0.39.0
version/adobe flash player/8.0.42.0
version/adobe flash player/9.0
version/adobe flash player/9.0.8.0
version/adobe flash player/9.0.9.0
version/adobe flash player/9.0.16
version/adobe flash player/9.0.18d60
version/adobe flash player/9.0.20
version/adobe flash player/9.0.20.0
version/adobe flash player/9.0.28
version/adobe flash player/9.0.28.0
version/adobe flash player/9.0.31
version/adobe flash player/9.0.31.0
version/adobe flash player/9.0.45.0
version/adobe flash player/9.0.47.0
version/adobe flash player/9.0.48.0
version/adobe flash player/9.0.112.0
version/adobe flash player/9.0.114.0
version/adobe flash player/9.0.115.0
version/adobe flash player/9.0.124.0
version/adobe flash player/9.0.125.0
version/adobe flash player/9.0.151.0
version/adobe flash player/9.0.152.0
version/adobe flash player/9.0.155.0
version/adobe flash player/9.0.159.0
version/adobe flash player/9.0.246.0
version/adobe flash player/9.0.260.0
version/adobe flash player/9.0.262.0
version/adobe flash player/9.0.277.0
version/adobe flash player/9.0.280
version/adobe flash player/9.0.283.0
version/adobe flash player/9.125.0
version/adobe flash player/10
version/adobe flash player/10.0.0.584
version/adobe flash player/10.0.2.54
version/adobe flash player/10.0.12.10
version/adobe flash player/10.0.12.36
version/adobe flash player/10.0.15.3
version/adobe flash player/10.0.22.87
version/adobe flash player/10.0.32.18
version/adobe flash player/10.0.42.34
version/adobe flash player/10.0.45.2
version/adobe flash player/10.1
version/adobe flash player/10.1.52.14
version/adobe flash player/10.1.52.14.1
version/adobe flash player/10.1.52.15
version/adobe flash player/10.1.53.64
version/adobe flash player/10.1.82.76
version/adobe flash player/10.1.85.3
version/adobe flash player/10.1.92.8
version/adobe flash player/10.1.92.10
version/adobe flash player/10.1.95.1
version/adobe flash player/10.1.95.2
version/adobe flash player/10.1.102.64
version/adobe flash player/10.1.105.6
version/adobe flash player/10.1.106.16
version/adobe flash player/10.1.106.17
version/adobe flash player/10.2.152
version/adobe flash player/10.2.152.26
version/adobe flash player/10.2.152.32
version/adobe flash player/10.2.152.33
version/adobe flash player/10.2.153.1
version/adobe flash player/10.2.154.13
version/adobe flash player/10.2.154.25
version/adobe flash player/10.2.156.12
version/adobe flash player/10.2.157.51
version/adobe flash player/10.2.159.1
version/adobe flash player/10.3.181.14
version/adobe flash player/10.3.181.16
version/adobe flash player/10.3.181.22
version/adobe flash player/10.3.181.23
version/adobe flash player/10.3.181.26
version/adobe flash player/10.3.181.34
version/adobe flash player/10.3.183.5
version/adobe flash player/10.3.183.7
version/adobe flash player/10.3.183.10
version/adobe flash player/10.3.183.11
version/adobe flash player/10.3.183.15
version/adobe flash player/10.3.183.16
version/adobe flash player/10.3.183.18
version/adobe flash player/10.3.183.19
version/adobe flash player/10.3.183.23
version/adobe flash player/10.3.185.22
version/adobe flash player/10.3.185.24
version/adobe flash player/10.3.186.3
version/adobe flash player/10.3.186.6
version/adobe flash player/10.3.186.7
version/adobe flash player/11.0
version/adobe flash player/11.0.1.152
version/adobe flash player/11.0.1.153
version/adobe flash player/11.1
version/adobe flash player/11.1.102.55
version/adobe flash player/11.1.102.59
version/adobe flash player/11.1.102.62
version/adobe flash player/11.1.102.63
version/adobe flash player/11.1.111.8
version/adobe flash player/11.1.115.7
version/adobe flash player/11.2.202.228
version/adobe flash player/11.2.202.233
version/adobe flash player/11.2.202.235
version/adobe flash player/11.2.202.238
version/adobe flash player/11.3.300.270

CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability

Remedy

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact