EXPOSURES › CVE-2012-5054

CVE-2012-5054

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-06-08 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2012-5054 ↗

⌖ EXPLOITED IN THE WILD SHAME 50/100 exploited-in-wild

An integer overflow in Adobe Flash Player allowed remote code execution, and its end-of-life status means no patches exist for this vulnerability.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

DESCRIPTION

Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.

AFFECTED FEDRAMP PRODUCTS · 8

PRODUCT	PROVIDER	STATUS	MATCH
Adobe Acrobat Sign for Government Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager Adobe	Adobe	Authorized	vendor-exact · 0.90