ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117226

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.apple.com/kb/HT5282

Resource:

x_refsource_CONFIRM

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html

Resource:

vendor-advisory

x_refsource_SUSE

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117230

Resource:

x_refsource_CONFIRM

Hyperlink: http://security.gentoo.org/glsa/glsa-201203-19.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563

Resource:

x_refsource_MISC

Hyperlink: http://www.securitytracker.com/id?1026776

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/52369	vdb-entry x_refsource_BID x_transferred
https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs	x_refsource_CONFIRM x_transferred
http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/48527	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/security-announce/2012/May/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
http://code.google.com/p/chromium/issues/detail?id=117226	x_refsource_CONFIRM x_transferred
http://support.apple.com/kb/HT5282	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/48419	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/security-announce/2012/May/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/48321	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686	vdb-entry signature x_refsource_OVAL x_transferred
http://code.google.com/p/chromium/issues/detail?id=117230	x_refsource_CONFIRM x_transferred
http://security.gentoo.org/glsa/glsa-201203-19.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/47292	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563	x_refsource_MISC x_transferred
http://www.securitytracker.com/id?1026776	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: http://www.securityfocus.com/bid/52369

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117226

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://support.apple.com/kb/HT5282

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117230

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201203-19.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securitytracker.com/id?1026776

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:09 Mar, 2012 | 00:55

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Google LLC

>>chrome>>Versions before 17.0.963.78(exclusive)

openSUSE

>>opensuse>>12.1

cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*

Apple Inc.

>>safari>>Versions before 5.1.7(exclusive)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>Versions before 5.1.1(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=117226	cve@mitre.org	Vendor Advisory
http://code.google.com/p/chromium/issues/detail?id=117230	cve@mitre.org	Vendor Advisory
http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html	cve@mitre.org	Release Notes Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/May/msg00000.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/May/msg00002.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html	cve@mitre.org	Mailing List Third Party Advisory
http://secunia.com/advisories/47292	cve@mitre.org	Not Applicable
http://secunia.com/advisories/48321	cve@mitre.org	Not Applicable
http://secunia.com/advisories/48419	cve@mitre.org	Not Applicable
http://secunia.com/advisories/48527	cve@mitre.org	Not Applicable
http://security.gentoo.org/glsa/glsa-201203-19.xml	cve@mitre.org	Third Party Advisory
http://support.apple.com/kb/HT5282	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/bid/52369	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026776	cve@mitre.org	Third Party Advisory VDB Entry
http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563	cve@mitre.org	Press/Media Coverage
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686	cve@mitre.org	Third Party Advisory
https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs	cve@mitre.org	Permissions Required Vendor Advisory
http://code.google.com/p/chromium/issues/detail?id=117226	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://code.google.com/p/chromium/issues/detail?id=117230	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html	af854a3a-2127-422b-91ae-364da2661108	Release Notes Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/May/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/May/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://secunia.com/advisories/47292	af854a3a-2127-422b-91ae-364da2661108	Not Applicable
http://secunia.com/advisories/48321	af854a3a-2127-422b-91ae-364da2661108	Not Applicable
http://secunia.com/advisories/48419	af854a3a-2127-422b-91ae-364da2661108	Not Applicable
http://secunia.com/advisories/48527	af854a3a-2127-422b-91ae-364da2661108	Not Applicable
http://security.gentoo.org/glsa/glsa-201203-19.xml	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://support.apple.com/kb/HT5282	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securityfocus.com/bid/52369	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026776	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563	af854a3a-2127-422b-91ae-364da2661108	Press/Media Coverage
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs	af854a3a-2127-422b-91ae-364da2661108	Permissions Required Vendor Advisory

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117226

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117230

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html

Source: cve@mitre.org

Resource:

Release Notes

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00000.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00002.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Source: cve@mitre.org

Resource:

Not Applicable

Source: cve@mitre.org

Resource:

Not Applicable

Source: cve@mitre.org

Resource:

Not Applicable

Source: cve@mitre.org

Resource:

Not Applicable

Hyperlink: http://security.gentoo.org/glsa/glsa-201203-19.xml

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://support.apple.com/kb/HT5282

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/52369

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026776

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563

Source: cve@mitre.org

Resource:

Press/Media Coverage

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs

Source: cve@mitre.org

Resource:

Permissions Required

Vendor Advisory

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117226

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=117230

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://googlechromereleases.blogspot.com/2012/03/chrome-stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Release Notes

Vendor Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.apple.com/archives/security-announce/2012/May/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Not Applicable

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Not Applicable

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Not Applicable

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Not Applicable

Hyperlink: http://security.gentoo.org/glsa/glsa-201203-19.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://support.apple.com/kb/HT5282

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/52369

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026776

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.zdnet.com/blog/security/cansecwest-pwnium-google-chrome-hacked-with-sandbox-bypass/10563

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Press/Media Coverage

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14686

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://plus.google.com/u/0/116651741222993143554/posts/5Eq5d9XgFqs

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Permissions Required

Vendor Advisory

Similar CVEs

2061Records found

CVE-2013-0647

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.78% / 89.23%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0638

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.78% / 89.23%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5138

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-0.78% / 73.28%

7 Day CHG~0.00%

Published-04 Dec, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.

Product-opensuse chrome n/a

CVE-2012-5142

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-5.60% / 90.11%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Product-opensuse chrome n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-5265

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5257

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5248

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5261

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.13% / 90.60%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5286

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-13 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5254

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5676

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.49% / 88.86%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5139

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-1.87% / 82.75%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events.

Product-opensuse chrome n/a

CWE ID-CWE-416

Use After Free

CVE-2012-5253

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-6971

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-1.97% / 83.22%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1089, CVE-2016-1091, CVE-2016-6944, CVE-2016-6945, CVE-2016-6946, CVE-2016-6949, CVE-2016-6952, CVE-2016-6953, CVE-2016-6961, CVE-2016-6962, CVE-2016-6963, CVE-2016-6964, CVE-2016-6965, CVE-2016-6967, CVE-2016-6968, CVE-2016-6969, CVE-2016-6979, CVE-2016-6988, and CVE-2016-6993.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-416

Use After Free

CVE-2012-5279

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.25% / 90.69%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5143

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-1.70% / 81.92%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers.

Product-opensuse chrome n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2012-5140

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-1.87% / 82.75%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader.

Product-opensuse chrome n/a

CWE ID-CWE-416

Use After Free

CVE-2012-5287

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-13 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5264

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5277

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.76% / 91.09%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, and CVE-2012-5280.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5678

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.57% / 91.64%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5259

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5285

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.26% / 92.04%

7 Day CHG~0.00%

Published-13 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5258

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.13% / 90.60%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5251

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5252

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.89% / 91.83%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5144

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-3.50% / 87.34%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."

Vendor-libav n/a openSUSE Google LLC Canonical Ltd.

Product-opensuse ubuntu_linux chrome libav n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2002-1369

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-9.97% / 92.87%

7 Day CHG~0.00%

Published-01 Sep, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

Vendor-easy_software_products n/a Apple Inc.

Product-cups mac_os_x n/a

CVE-2012-5260

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5274

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.76% / 91.09%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5263

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.13% / 90.60%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5280

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.67% / 92.26%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5262

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5835

Matching Score-8

Assigner-MITRE Corporation

Product-enterprise_linux_desktop linux_enterprise_server linux_enterprise_software_development_kit ubuntu_linux thunderbird_esr enterprise_linux_eus seamonkey enterprise_linux_workstation thunderbird linux_enterprise_desktop firefox opensuse enterprise_linux_server n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.89% / 75.16%

7 Day CHG~0.00%

Published-21 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via crafted data.

Vendor-n/a SUSE Canonical Ltd.Mozilla Corporation Red Hat, Inc.openSUSE

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2012-5270

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.96% / 90.44%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5267

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.10% / 91.96%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5673

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.35% / 79.75%

7 Day CHG~0.00%

Published-13 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 has unknown impact and attack vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CVE-2012-5249

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5275

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.76% / 91.09%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5112

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-4.59% / 88.99%

7 Day CHG~0.00%

Published-11 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC

Product-iphone_os chrome n/a

CVE-2012-5271

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.10% / 91.96%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5256

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.13% / 90.60%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5255

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5250

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5268

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.13% / 90.60%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5272

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.94% / 92.86%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5278

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.26% / 88.56%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CVE-2012-5269

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.10% / 91.96%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5677

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.93% / 91.85%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CVE-2012-5276

Matching Score-8

Matching Score-8