CVE-2012-5285: Buffer Overflow
Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5285?
CVE-2012-5285 has been classified with a high severity due to its buffer overflow vulnerability that can allow an attacker to execute arbitrary code.
How do I fix CVE-2012-5285?
To fix CVE-2012-5285, you must update Adobe Flash Player to versions 10.3.183.29, 11.4.402.287 or later, or ensure Adobe AIR is updated to version 3.4.0.2710 or higher.
Which software versions are impacted by CVE-2012-5285?
CVE-2012-5285 affects Adobe Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.4.402.287, as well as Adobe AIR versions before 3.4.0.2710.
What platforms are affected by CVE-2012-5285?
CVE-2012-5285 impacts Adobe Flash Player on multiple platforms including Windows, Mac OS X, Linux, and Android.
Are there any workarounds for CVE-2012-5285?
While the best approach is to update the software, reducing the use of Flash Player or disabling it in browsers may serve as a temporary workaround for CVE-2012-5285.