CVE-2012-1535

Published: 15/08/2012 Updated: 30/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in Adobe Flash Player prior to 11.3.300.271 on Windows and Mac OS X and prior to 11.2.202.238 on Linux allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash player
adobe flash player 2
adobe flash player 3
adobe flash player 4
adobe flash player 5
adobe flash player 6
adobe flash player 6.0.21.0
adobe flash player 6.0.79
adobe flash player 7.0
adobe flash player 7.0.1
adobe flash player 7.0.14.0
adobe flash player 7.0.19.0
adobe flash player 7.0.24.0
adobe flash player 7.0.25
adobe flash player 7.0.53.0
adobe flash player 7.0.60.0
adobe flash player 7.0.61.0
adobe flash player 7.0.63
adobe flash player 7.0.66.0
adobe flash player 7.0.67.0
adobe flash player 7.0.68.0
adobe flash player 7.0.69.0
adobe flash player 7.0.70.0
adobe flash player 7.0.73.0
adobe flash player 7.1
adobe flash player 7.1.1
adobe flash player 7.2
adobe flash player 8.0
adobe flash player 8.0.22.0
adobe flash player 8.0.24.0
adobe flash player 8.0.33.0
adobe flash player 8.0.34.0
adobe flash player 8.0.35.0
adobe flash player 8.0.39.0
adobe flash player 8.0.42.0
adobe flash player 9.0.8.0
adobe flash player 9.0.9.0
adobe flash player 9.0.16
adobe flash player 9.0.18d60
adobe flash player 9.0.20
adobe flash player 9.0.20.0
adobe flash player 9.0.28
adobe flash player 9.0.28.0
adobe flash player 9.0.31
adobe flash player 9.0.31.0
adobe flash player 9.0.45.0
adobe flash player 9.0.47.0
adobe flash player 9.0.48.0
adobe flash player 9.0.112.0
adobe flash player 9.0.114.0
adobe flash player 9.0.115.0
adobe flash player 9.0.124.0
adobe flash player 9.0.125.0
adobe flash player 9.0.151.0
adobe flash player 9.0.152.0
adobe flash player 9.0.155.0
adobe flash player 9.0.159.0
adobe flash player 9.0.246.0
adobe flash player 9.0.260.0
adobe flash player 9.0.262.0
adobe flash player 9.0.277.0
adobe flash player 9.0.280
adobe flash player 9.0.283.0
adobe flash player 9.125.0
adobe flash player 10.0.0.584
adobe flash player 10.0.2.54
adobe flash player 10.0.12.10
adobe flash player 10.0.12.36
adobe flash player 10.0.15.3
adobe flash player 10.0.22.87
adobe flash player 10.0.32.18
adobe flash player 10.0.42.34
adobe flash player 10.0.45.2
adobe flash player 10.1
adobe flash player 10.1.52.14
adobe flash player 10.1.52.14.1
adobe flash player 10.1.52.15
adobe flash player 10.1.53.64
adobe flash player 10.1.82.76
adobe flash player 10.1.85.3
adobe flash player 10.1.92.8
adobe flash player 10.1.92.10
adobe flash player 10.1.95.1
adobe flash player 10.1.95.2
adobe flash player 10.1.102.64
adobe flash player 10.1.105.6
adobe flash player 10.1.106.16
adobe flash player 10.1.106.17
adobe flash player 10.2.152
adobe flash player 10.2.152.26
adobe flash player 10.2.152.32
adobe flash player 10.2.152.33
adobe flash player 10.2.153.1
adobe flash player 10.2.154.13
adobe flash player 10.2.154.25
adobe flash player 10.2.156.12
adobe flash player 10.2.157.51
adobe flash player 10.2.159.1
adobe flash player 10.3.181.14
adobe flash player 10.3.181.16
adobe flash player 10.3.181.22
adobe flash player 10.3.181.23
adobe flash player 10.3.181.26
adobe flash player 10.3.181.34
adobe flash player 10.3.183.5
adobe flash player 10.3.183.7
adobe flash player 10.3.183.10
adobe flash player 10.3.183.11
adobe flash player 10.3.183.15
adobe flash player 10.3.183.16
adobe flash player 10.3.183.18
adobe flash player 10.3.183.19
adobe flash player 10.3.185.22
adobe flash player 10.3.185.24
adobe flash player 10.3.186.3
adobe flash player 10.3.186.6
adobe flash player 10.3.186.7
adobe flash player 11.0
adobe flash player 11.0.1.152
adobe flash player 11.0.1.153
adobe flash player 11.1
adobe flash player 11.1.102.55
adobe flash player 11.1.102.59
adobe flash player 11.1.102.62
adobe flash player 11.1.102.63
adobe flash player 11.1.111.8
adobe flash player 11.1.115.7
adobe flash player 11.2.202.228
adobe flash player 11.2.202.233
adobe flash player 11.2.202.235

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes one security issue is nowavailable for Red Hat Enterprise Linux 6 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalsecurity ...

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 5 SupplementaryThe Red Hat Security Response Team has rated this update as having criticalsec ...

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # web site for more information on licensing and terms of use # metasploitcom/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = AverageRanking include Msf::Exploit:: ...

This Metasploit module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 113300271 By supplying a corrupt Font file used by the SWF, it is possible to gain arbitrary remote code execution under the context of the user, as exploited in the wild ...

NVD-CWE-noinfo http://www.adobe.com/support/security/bulletins/apsb12-18.html http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00010.html http://rhn.redhat.com/errata/RHSA-2012-1203.html http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00012.html http://security.gentoo.org/glsa/glsa-201209-01.xml http://marc.info/?l=bugtraq&m=139455789818399&w=2 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2012:1173 https://www.exploit-db.com/exploits/20624/

Get Started

CVE-2012-1535

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect