Adobe Flash Player Integer Overflow Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2012-5054 · Published 24/09/2012 · updated 16/06/2026

Adobe Flash Player Integer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
flash player adobe	`< 11.4.402.265`	`11.4.402.265`

Description

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

References

packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html · Exploit
adobe.com/support/security/bulletins/apsb12-19.html · Not Applicable
vupen.com/english/services/ba-index.php · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/78866 · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2012-5054

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free