CVE-2012-5054
- State
- Published
- Severity
- 8.8 High
- Published
- Sep 24, 2012
- Updated
- Oct 22, 2025
- Reserved
- Sep 21, 2012
Description
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-190 Integer Overflow or Wraparound
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.adobe.com/support/security/bulletins/apsb12-19.html
- http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
- adobe-flash-matrix3d-overflow(78866)vdb-entry
- http://www.vupen.com/english/services/ba-index.php
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.