CVE-2012-5054

Adobe Flash Player contains an integer overflow weakness (CWE-189 category) that a remote attacker can trigger by having the player process malformed arguments, typically via malicious Flash content. Successful exploitation allows the attacker to execute arbitrary code in the context of the Flash Player process, i.e., potentially with the privileges of the user's account. Anyone running Adobe Flash Player is affected; because Flash is end-of-life (support ended December 31, 2020), current exposure is limited to leftover or unmigrated installations on legacy systems and applications. CISA added this CVE to the Known Exploited Vulnerabilities catalog on 2022-06-08, indicating exploitation in the wild, with ransomware association unknown; EPSS estimates a 21.2% probability of exploitation in the next 30 days (97th percentile), and no public proof-of-concept is known.

What to do: Uninstall or disable Adobe Flash Player on all systems, per CISA's required action for this end-of-life product; check for residual browser plugins, standalone Flash projectors, and embedded/OEM copies of Flash that lack Adobe's automatic content blocking. Where legacy Flash use is unavoidable, upgrade to the last available release, isolate those hosts from untrusted content, and plan removal, since no new patches will be issued.