# CVE-2012-0754

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

- Page: https://www.vulneraibility.com/cve/CVE-2012-0754
- CVSS: 8.1
- Known exploited: yes, in CISA KEV since 2022-06-08; CISA due date 2022-06-22
- EPSS: 91.19% (percentile 99.8)
- Public exploit code: 1 on Exploit-DB · 1 Metasploit module · 1 GitHub proof of concept (first 2012-03-08)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-02-10)
- Published: 2012-02-16

## Affected

- adobe:flash_player

## References

- [other] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15973
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html
- [advisory] http://security.gentoo.org/glsa/glsa-201204-07.xml
- [advisory] http://secunia.com/advisories/48265
- [other] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15030
- [other] http://www.adobe.com/support/security/bulletins/apsb12-03.html
- [advisory] http://rhn.redhat.com/errata/RHSA-2012-0144.html
- [advisory] http://secunia.com/advisories/48819
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0754
- [other] https://github.com/cisagov/vulnrichment/issues/196

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.