CVE-2012-0778
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@adobe.com — http://www.adobe.com/support/security/bulletins/apsb12-12.html
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| adobe | flash_cs3 | 9.0 | |
| adobe | flash_cs4 | 10.0 | |
| adobe | flash_cs5.5 | {"endIncluding":"11.0"} | |
References
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.