Adobe Flash Player Arbitrary Code Execution Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2012-1535 · Published 15/08/2012 · updated 16/06/2026

Adobe Flash Player Arbitrary Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/03/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
flash player adobe	`< 11.2.202.238< 11.3.300.271`	`11.2.202.23811.3.300.271`

Description

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

References

lists.opensuse.org/opensuse-security-announce/2012-08/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-08/msg00012.html · Mailing List
marc.info · Mailing List
rhn.redhat.com/errata/RHSA-2012-1203.html · Third Party Advisory
security.gentoo.org/glsa/glsa-201209-01.xml · Third Party Advisory
adobe.com/support/security/bulletins/apsb12-18.html · Not Applicable
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2012-1535

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free