CVE-2012-1535: Flash 0-day In The Wild
Summary: Adobe released APSB12-18 addressing CVE-2012-1535, a Flash vulnerability actively exploited in the wild primarily through targeted attacks wrapped in Microsoft Word documents. Cisco Talos obtained a circulating sample and released rules SIDs 23853 and 23854 for the underlying vulnerability, 23856 and 23857 for the specific Flash files, and 23857-23862 for heap spray byte variants.
What you should know: Talos notes that SIDs 18546 or 18549, which look for Flash files embedded in Word documents, would have caught this attack before any party discovered it - meaning the detection existed and the question is whether it was enabled in your environment.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2012-1535
- Related
- CVE-2012-1535: Adobe Flash Player Arbitrary Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022Critical Security Fixes from Adobe, Microsoft Cyber Risks ·New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026