IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.8Alta KEV

CVE-2012-1535Adobe Flash Player Arbitrary Code Execution Vulnerability

adobe flash player; redhat enterprise linux desktop; redhat enterprise linux server; redhat enterprise linux workstation Publicada: (hace 14 años)

Explotación conocida — Adobe Flash Player Arbitrary Code Execution Vulnerability

CISA confirmó el 03.03.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 24.03.2022.

Acción requerida: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2012-1535

Descripción

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Debilidad (CWE): CWE-94CWE-20

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
adobe flash player < 11.3.300.271
opensuse opensuse 11.4
redhat enterprise linux desktop 5.0
redhat enterprise linux server 5.0
redhat enterprise linux workstation 5.0
suse linux enterprise desktop 10

Referencias y parches

Coincidencias CPE (NVD) (8)
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 11.3.300.271
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 11.2.202.238
  • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*

CVE recientes del mismo producto — Red Hat Enterprise Linux

5.5Media
CVE-2026-110330

Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This al…

7.8Alta
CVE-2026-110331

Abrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard a…