CVE-2012-1535
High · 7.8 CISA KEVCVSS
7.8
EPSS
70.4%
Published
Aug 15, 2012
CISA due date
Mar 24, 2022
The record
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:11.2.202.238-1.el5 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:11.2.202.238-1.el5 |
| Red Hat:rhel_extras:6 | flash-plugin | 0 | 0:11.2.202.238-1.el6 |
Related vulnerabilities
- CVE-2016-7855 Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X… Also affects flash-plugin
- CVE-2016-4273 Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows… Also affects flash-plugin
- CVE-2016-4275 Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows… Also affects flash-plugin
- CVE-2016-4232 Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows… Also affects flash-plugin
- CVE-2016-4230 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through… Also affects flash-plugin
- CVE-2016-4231 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through… Also affects flash-plugin
- CVE-2016-4228 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through… Also affects flash-plugin
- CVE-2016-4229 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through… Also affects flash-plugin