CVE-2012-0779
EXPLOITED IN THE WILDAdobe Flash Player <10.3.183.19-11.2.202.235 - RCE
Title source: llmExploitation Summary
CVE-2012-0779 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 2 public exploits from researchers including Metasploit, sinn3r, juan vazquez, including a Metasploit module exploits/windows/browser/adobe_flash_rtmp.
AI-analyzed exploit summary This Metasploit module exploits a type confusion vulnerability in Adobe Flash Player (CVE-2012-0779) by sending a corrupt AMF0 '_error' response to achieve arbitrary remote code execution. It includes ROP chains and heap spraying techniques to bypass memory protections.
Description
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
Exploits (2)
This Metasploit module exploits a type confusion vulnerability in Adobe Flash Player (CVE-2012-0779) by sending a corrupt AMF0 '_error' response to achieve arbitrary remote code execution. It includes ROP chains and heap spraying techniques to bypass memory protections.
This Metasploit module exploits a type confusion vulnerability in Adobe Flash Player (CVE-2012-0779) by sending a corrupt AMF0 '_error' response via RTMP, leading to arbitrary remote code execution. It includes heap spraying and ROP chain techniques to achieve reliable exploitation on targeted Windows XP systems with specific IE versions.