{"uuid": "49770b3a-6db1-46f9-b344-45494bb73462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-1535", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_otf_font.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Alexander Gavrun\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in the ActiveX component of Adobe\\n          Flash Player before 11.3.300.271. By supplying a specially crafted .otf font file\\n          with a large nTables value in the 'kern' header, it is possible to trigger an\\n          integer overflow, which results in remote code execution under the context of the\\n          user.  This vulnerability has also been exploited in the wild in limited targeted\\n          attacks.  Please note in order to ensure reliability, the exploit is forced to\\n          modify your URIPATH parameter to less than 3 characters, which may cause possible\\n          URIPATH collisions.\", \"disclosure_date\": \"2012-08-09\", \"fullname\": \"exploit/windows/browser/adobe_flash_otf_font\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Flash Player 11.3 Kern Table Parsing Integer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/adobe_flash_otf_font.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/adobe_flash_otf_font\", \"references\": [\"CVE-2012-1535\", \"OSVDB-84607\", \"BID-55009\", \"URL-http://labs.alienvault.com/labs/index.php/2012/cve-2012-1535-adobe-flash-being-exploited-in-the-wild/\", \"URL-https://developer.apple.com/fonts/TTRefMan/RM06/Chap6.html\", \"URL-http://contagiodump.blogspot.com.es/2012/08/cve-2012-1535-samples-and-info.html\", \"URL-https://www.rapid7.com/blog/post/2012/08/17/adobe-flash-player-exploit-cve-2012-1535-now-available-for-metasploit\", \"URL-http://www.adobe.com/support/security/bulletins/apsb12-18.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 6 on Windows XP SP3\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3\", \"IE 7 on Windows Vista SP2\", \"IE 8 on Windows 7 SP1\", \"IE 9 on Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:57.511051Z"}