Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-0648
HistoryFeb 27, 2013 - 12:55 a.m.

CVE-2013-0648

2013-02-2700:55:01
[email protected]
web.nvd.nist.gov
104
cve-2013-0648
adobe flash player
vulnerability
externalinterface
actionscript
swf
remote code execution
nvd
security advisory

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Affected configurations

NVD
Node
adobeflash_playerRange10.3–10.3.183.67
OR
adobeflash_playerRange11.6–11.6.602.171
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange10.3–10.3.183.67
OR
adobeflash_playerRange11.2–11.2.202.273
AND
linuxlinux_kernelMatch-

Related

checkpoint_advisories 1
cvelist 1
nvd 1
ubuntucve 1
prion 1
nessus 10
cisa 1
openvas 11
suse 4
redhat 1
freebsd 1
threatpost 1
securityvulns 1
gentoo 1
checkpoint_advisories
checkpoint_advisories
Adobe Flashplayer Malicious SWF Use After Free Code Execution (CVE-2013-0648)
2013-02-28 00:00:00
cvelist
cvelist
CVE-2013-0648
2013-02-27 00:00:00
nvd
nvd
CVE-2013-0648
2013-02-27 00:55:01
ubuntucve
ubuntucve
CVE-2013-0648
2013-02-27 00:00:00
prion
prion
Code injection
2013-02-27 00:55:00
nessus
nessus
MS KB2819372: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10
2013-02-27 00:00:00
FreeBSD : linux-flashplugin -- multiple vulnerabilities (dbdac023-80e1-11e2-9a29-001060e06fd4)
2013-02-28 00:00:00
SuSE 10 Security Update : flash-player (ZYPP Patch Number 8476)
2013-03-01 00:00:00
cisa
cisa
Security Updates Available for Adobe Flash Player
2013-02-27 00:00:00
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities -01 (Mar 2013) - Linux
2013-03-04 00:00:00
Adobe Flash Player Multiple Vulnerabilities -01 March13 (Windows)
2013-03-04 00:00:00
openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0359-1)
2013-03-11 00:00:00
suse
suse
flash-player to 11.2.202.273 (critical)
2013-02-28 14:05:45
flash-player to 11.2.202.273 (critical)
2013-02-28 18:26:44
flash-player to 11.2.202.273 (critical)
2013-02-28 17:05:42
redhat
redhat
(RHSA-2013:0574) Critical: flash-plugin security update
2013-02-27 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2013-02-26 00:00:00
threatpost
threatpost
Adobe Patches Two Critical Flash Player Vulnerabilities
2013-02-26 21:26:24
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2013-03-03 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2013-09-14 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON
Related for CVE-2013-0648
checkpoint_advisories1cvelist1nvd1ubuntucve1prion1nessus10cisa1openvas11suse4redhat1freebsd1threatpost1securityvulns1gentoo1