Attacker Value
Very High
CVE-2012-1535
CVE-2012-1535
(Last updated July 17, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Metasploit Module
Description
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.
Add Assessment
1
Technical Analysis
A rather prolific exploit from the summer of ‘12. A couple Chinese intrusion sets went ham with this almost as a final hurrah considering the exposure it brought on them and how things changed over the years to follow.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
7.8 High
Impact Score:
5.9
Exploitability Score:
1.8
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
Required
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- adobe,
- opensuse,
- redhat,
- suse
Products
- enterprise linux desktop 5.0,
- enterprise linux server 5.0,
- enterprise linux workstation 5.0,
- flash player,
- linux enterprise desktop 10,
- opensuse 11.4,
- opensuse 12.1
Metasploit Modules
References
Advisory
