Back to feed
EUVD-2012-1553 · Published Aug 15, 2012
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.
Technologies
Suse Linux Enterprise DesktopOpensuse OpensuseRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerMicrosoft WindowsLinux Linux KernelApple Mac Os XAdobe Flash PlayerRedhat Enterprise Linux Workstation
Weaknesses
CWE-20CWE-94
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - v2.09.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Stealth
References
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00012.html
- http://marc.info/?l=bugtraq&m=139455789818399&w=2
- http://rhn.redhat.com/errata/RHSA-2012-1203.html
- http://security.gentoo.org/glsa/glsa-201209-01.xml
- http://www.adobe.com/support/security/bulletins/apsb12-18.html
Potentially impacted assets
See if this affects your attack surface
