CVE-2012-1535 Adobe Flash Player Arbitrary Code Execution
Remote attackers can execute arbitrary code or cause denial of service via crafted SWF content in Adobe Flash Player.
- Exploited in the wild
- Since 3 Mar 2022
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2012-1535?
CVE-2012-1535 is a high-severity code injection vulnerability in Adobe Flash Player, published on 15 Aug 2012. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.
Which versions are affected by CVE-2012-1535?
It affects 6 products.
Products include Adobe Flash Player, Opensuse Opensuse, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation, Suse Linux Enterprise Desktop.
How do I fix CVE-2012-1535?
Upgrade to a fixed version. US federal agencies must fix it by 24 Mar 2022.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2012-1535 being exploited?
Yes. Attackers have exploited CVE-2012-1535 in the wild since at least 3 Mar 2022.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in Adobe Flash Player
Sources
Also known as GHSA-5876-f5vv-fv9w.