CVE-2013-0634 Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and bef...
HighCVSS 9.3
EPSS 77.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | >= 10.3, < 10.3.183.51 | 10.3.183.51 |
| Adobe flash player | >= 11.5, < 11.5.502.149 | 11.5.502.149 |
| Adobe flash player | >= 11.2, < 11.2.202.262 | 11.2.202.262 |
| Adobe flash player | >= 11.1, < 11.1.111.32 | 11.1.111.32 |
| Adobe flash player | >= 11.1, < 11.1.115.37 | 11.1.115.37 |
References
- openSUSE-SU-2013:0279 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0284 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2013:0288 mailing-list third-party-advisory vendor-advisory
- RHSA-2013:0243 third-party-advisory vendor-advisory
- www.adobe.com patch vendor-advisory