CVE-2012-1535

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

70.38% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2022-03-03

Published

2012-08-15

Updated

2025-10-22

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_otf_…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20624

Security advisories

• http://www.adobe.com/support/security/bulletins/apsb12-18.html
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00012.html
• http://rhn.redhat.com/errata/RHSA-2012-1203.html
• http://security.gentoo.org/glsa/glsa-201209-01.xml

References

• CVE Record
• NVD entry