CVE-2012-1535

Timeline

Detection, updates, and resolution for this record.

1. Aug 15, 2012 · Catalog

   Detected

   Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

2. Mar 3, 2022 · CISA KEV

   Known exploited

   The impacted product is end-of-life and should be disconnected if still in use.

3. Mar 24, 2022 · CISA KEV

   Remediation due

   The impacted product is end-of-life and should be disconnected if still in use.

4. Jun 16, 2026 · Catalog

   Updated

   Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Affected

• cpe adobe/flash playerversion unspecified
• cpe opensuse/opensuse11.4
• cpe opensuse/opensuse12.1
• cpe redhat/enterprise linux desktop5.0
• cpe redhat/enterprise linux server5.0
• cpe redhat/enterprise linux workstation5.0
• cpe suse/linux enterprise desktop10
• vendor Adobe Flash Playerversion unspecified

Sources

• CISA KEVCVE-2012-1535

  Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.

  cisa.gov
• CVE.orgCVE-2012-1535

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2012-1535

  30-day exploitation probability 70.4%

  first.org
• Exploit Database20624

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• Metasploit Modulesexploit_windows/browser/adobe_flash_otf_font

  Public module reference (normal). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDCVE-2012-1535

  Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in Aug

  nvd.nist.gov

References

• Mailing List · lists.opensuse.org
• Mailing List · lists.opensuse.org
• Mailing List · marc.info
• Third Party Advisory · rhn.redhat.com
• Third Party Advisory · security.gentoo.org
• Not Applicable · adobe.com
• CISA note · nvd.nist.gov