Skip to content

CVE-2013-0643 The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restr...

HighCVSS 8.8 EPSS 10.5% CISA KEV added 2024-09-17 · due 2024-10-08 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

CISA Known Exploited Vulnerability

Date added
2024-09-17
Due date (FCEB)
2024-10-08
Ransomware use
Unknown

Required action

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Affected products

ProductAffected versionsFixed in
Adobe flash player < 10.3.183.67 10.3.183.67
Adobe flash player >= 11.0, < 11.6.602.171 11.6.602.171
Adobe flash player >= 11.0, < 11.2.202.273 11.2.202.273
redhat enterprise linux desktop = 6.0 No fix listed
redhat enterprise linux eus = 5.9 No fix listed
redhat enterprise linux eus = 6.4 No fix listed
redhat enterprise linux server = 6.0 No fix listed
redhat enterprise linux server aus = 5.9 No fix listed
redhat enterprise linux server aus = 6.4 No fix listed
redhat enterprise linux workstation = 6.0 No fix listed
opensuse = 11.4 No fix listed
opensuse = 12.1 No fix listed
SUSE linux enterprise desktop = 10-sp4 No fix listed
SUSE linux enterprise desktop = 11-sp2 No fix listed

References