CVE-2012-5677
Last modified
CVE-2012-5677 is a vulnerability of currently unknown severity. Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.. EPSS estimates a 6.87% chance of exploitation in the next 30 days.
Description
Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player | >= 10.3, < 10.3.183.48 |
| Adobe | Flash Player | >= 11.5, < 11.5.502.135 |
| Adobe | Flash Player | >= 11.2, < 11.2.202.258 |
| Adobe | Flash Player | >= 11.1, < 11.1.111.29 |
| Adobe | Flash Player | >= 11.1, < 11.1.115.34 |
| Adobe | Air | < 3.5.0.880 |
| Adobe | Flash Player | >= 11.5, < 11.5.502.136 |
| Adobe | Air | < 3.5.0.890 |
| Adobe | Air Sdk | < 3.5.0.880 |
| Adobe | Air Sdk | < 3.5.0.890 |
References
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.htmlMailing List, Third Party Advisory
- http://www.adobe.com/support/security/bulletins/apsb12-27.htmlPatch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.htmlMailing List, Third Party Advisory
- http://www.adobe.com/support/security/bulletins/apsb12-27.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-5677?
How severe is CVE-2012-5677?
How do I fix CVE-2012-5677?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-5671Heap-based buffer overflow in the dkim_exim_query_dns_txt fu…
- CVE-2012-5672Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microso…
- CVE-2012-5673Unspecified vulnerability in Adobe Flash Player before 10.3.…
- CVE-2012-5674Unspecified vulnerability in Adobe ColdFusion 10 before Upda…
- CVE-2012-5675Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local use…
- CVE-2012-5676Buffer overflow in Adobe Flash Player before 10.3.183.48 and…
- CVE-2012-5678Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.5…
- CVE-2012-5679Buffer underflow in Adobe Photoshop Camera Raw before 7.3 al…
- CVE-2012-5680Buffer overflow in Adobe Photoshop Camera Raw before 7.3 all…
- CVE-2012-5681Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-5682Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-5683Multiple cross-site request forgery (CSRF) vulnerabilities i…
Are you affected by CVE-2012-5677?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
