CVE-2012-5054

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

21.19% chance of exploitation in the next 30 days, 98th percentile

CISA KEV

added 2022-06-08

Published

2012-09-24

Updated

2025-10-22

Proof-of-concept exploits (1)

• http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-…

Security advisories

• http://www.adobe.com/support/security/bulletins/apsb12-19.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78866

References

• CVE Record
• NVD entry