CVE-2012-0754

high-risk

Published 2012-02-16

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Do I need to act?

91.5% chance of exploitation in next 30 days

EPSS score — higher than 8% of all CVEs

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

1 public exploit available

18572

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.1/10 High

NETWORK / HIGH complexity

Affected Products (1)

Flash Player

Affected Vendors

Adobe

References (18)

Broken Link http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-0144.html

Broken Link http://secunia.com/advisories/48265

Broken Link http://secunia.com/advisories/48819

Third Party Advisory http://security.gentoo.org/glsa/glsa-201204-07.xml

Broken Link http://www.adobe.com/support/security/bulletins/apsb12-03.html

Third Party Advisory https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...

Broken Link http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-0144.html

Broken Link http://secunia.com/advisories/48265

Broken Link http://secunia.com/advisories/48819

Third Party Advisory http://security.gentoo.org/glsa/glsa-201204-07.xml

Broken Link http://www.adobe.com/support/security/bulletins/apsb12-03.html

Third Party Advisory https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...

https://github.com/cisagov/vulnrichment/issues/196

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-...

/ 100

high-risk

Severity 24/34 · High

Exploitability 34/34 · Critical

Exposure 5/34 · Minimal