CVE-2012-1535KEV · OVERDUE

Adobe Flash Player Arbitrary Code Execution Vulnerability

High · published August 15, 2012

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

1673
days past CISA
deadline
CVSS v3.1
7.8
EPSS
70%
Percentile
99.4
In the wild
Confirmed
What it is

🚨 An unspecified vulnerability in Adobe Flash Player can let attackers execute arbitrary code just by opening a crafted SWF file! 🔥 Think of it like a magician pulling a rabbit out of a hat—but instead of a cute bunny, it's a malicious surprise that could crash your application or take control entirely. It's like inviting a juggler to your party, only to find out they're just throwing explosive swords! This vulnerability can lead to devastating consequences: attackers could remotely execute any code they want, causing your application to crash or, even worse, letting them take over your system completely. Imagine the chaos of someone hijacking your devices and wreaking havoc while you're blissfully unaware!

Put simply

Think of it like a magician pulling a rabbit out of a hat—but instead of a cute bunny, it's a malicious surprise that could crash your application or take control entirely. It's like inviting a juggler to your party, only to find out they're just throwing explosive swords! This vulnerability in Adobe Flash Player allows attackers to exploit crafted SWF content, leading to either arbitrary code execution or denial of service through application crashes. This is particularly dangerous as the exploit has been actively used in the wild, highlighting its severity.

What to do

This vulnerability can lead to devastating consequences: attackers could remotely execute any code they want, causing your application to crash or, even worse, letting them take over your system completely. Imagine the chaos of someone hijacking your devices and wreaking havoc while you're blissfully unaware! To protect yourself, update Adobe Flash Player to version 11.3.300.271 or later on Windows and Mac, and 11.2.202.238 or later on Linux immediately. If Flash is still part of your workflow, consider removing it altogether since it's no longer supported! You've got this! Stay vigilant and get your Flash Player updated to keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.70384 · 99.4th percentile
Published
2012-08-15T10:00Z
KEV added
2022-03-03 · due 2022-03-24
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 24
    kev
  • 15 AUG 10:00Z
    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute…
    cvelistv5