CVE-2013-0638

2013-02-1220:55:00

CWE-119

[email protected]

web.nvd.nist.gov

112

cve-2013

adobe flash player

memory corruption

security vulnerability

nvd

cve

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

86.9%

JSON

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0647.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerlt10.3.183.63
adobe:flash_playeradobe flash playerlt11.6.602.168
adobe:flash_playeradobe flash playerlt10.3.183.61
adobe:flash_playeradobe flash playerlt11.2.202.270
adobe:flash_playeradobe flash playerlt11.1.111.43
adobe:flash_playeradobe flash playerlt11.1.115.47
adobe:airadobe airlt3.6.0.597
adobe:air_sdkadobe air sdklt3.6.0.599
adobe:flash_playeradobe flash playerlt11.6.602.167

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	lt	10.3.183.63
adobe:flash_player	adobe flash player	lt	11.6.602.168
adobe:flash_player	adobe flash player	lt	10.3.183.61
adobe:flash_player	adobe flash player	lt	11.2.202.270
adobe:flash_player	adobe flash player	lt	11.1.111.43
adobe:flash_player	adobe flash player	lt	11.1.115.47
adobe:air	adobe air	lt	3.6.0.597
adobe:air_sdk	adobe air sdk	lt	3.6.0.599
adobe:flash_player	adobe flash player	lt	11.6.602.167