CVE-2012-0725

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-04-06 · updated 2026-06-16
Weakness: CWE-119

Description

Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724.

Affected products

Adobe Air: before 3.2.0.2070 — fixed in 3.2.0.2070
Adobe Flash Player 24.0.0.186 and earlier.: before 11.2.202.229; before 11.2.202.228; before 11.2.202.223; before 11.1.111.8 — fixed in 11.1.111.8, 11.2.202.223, 11.2.202.228, 11.2.202.229
Google Chrome: before 18.0.1025.151 — fixed in 18.0.1025.151

How to fix

Upgrade to a fixed version: Adobe Air 3.2.0.2070; Adobe Flash Player 24.0.0.186 and earlier. 11.1.111.8, 11.2.202.223, 11.2.202.228, 11.2.202.229; Google Chrome 18.0.1025.151. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2012-0725 or the next vulnerability affects your stack