Vulnerability in Adobe Flash_player

CVE-2012-0779

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a craf…

EPSS: 0.901 (99.6th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

  • 1027023 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
  • openSUSE-SU-2012:0594 (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • 53395 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • 49096 (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • RHSA-2012:0688 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
  • 81656 (x_refsource_OSVDB, vdb-entry, Broken Link)
  • 49038 (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • SUSE-SU-2012:0592 (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • psirt@adobe.com (x_refsource_CONFIRM, Vendor Advisory)
  • adobe-flash-objecttype-code-exec(75383) (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2012-0779?
CVE-2012-0779 is a vulnerability in Adobe Flash_player. Published 2012-05-04.
Is CVE-2012-0779 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.