ZeroDay Findings
Sign inSign up

Findings

CVE-2012-5054

Adobe Flash Player Integer Overflow Vulnerability

Published Sep 24, 2012 · updated Jun 16, 2026 · adobe flash player

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 24, 2012 · Catalog

    Detected

    Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

  2. Jun 8, 2022 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Jun 22, 2022 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Jun 22, 2022

Affected

  • cpe adobe/flash playerversion unspecified
  • vendor Adobe Flash Playerversion unspecified

Sources

  • CISA KEVCVE-2012-5054

    Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.

    cisa.gov
  • CVE.orgCVE-2012-5054

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2012-5054

    30-day exploitation probability 21.2%

    first.org
  • NIST NVDCVE-2012-5054

    Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

    nvd.nist.gov

References