Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-0643
HistoryFeb 27, 2013 - 12:55 a.m.

CVE-2013-0643

2013-02-2700:55:01
CWE-264
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.6%

JSON

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Affected configurations

NVD
Node
adobeflash_playerRange10.3–10.3.183.67
OR
adobeflash_playerRange11.6–11.6.602.171
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange10.3–10.3.183.67
OR
adobeflash_playerRange11.2–11.2.202.273
AND
linuxlinux_kernelMatch-

Related

cvelist 1
cve 1
prion 1
ubuntucve 1
cisa 1
nessus 9
openvas 11
suse 4
redhat 1
freebsd 1
threatpost 1
securityvulns 1
gentoo 1
cvelist
cvelist
CVE-2013-0643
2013-02-27 00:00:00
cve
cve
CVE-2013-0643
2013-02-27 00:55:01
prion
prion
Code injection
2013-02-27 00:55:00
ubuntucve
ubuntucve
CVE-2013-0643
2013-02-27 00:00:00
cisa
cisa
Security Updates Available for Adobe Flash Player
2013-02-27 00:00:00
nessus
nessus
FreeBSD : linux-flashplugin -- multiple vulnerabilities (dbdac023-80e1-11e2-9a29-001060e06fd4)
2013-02-28 00:00:00
SuSE 10 Security Update : flash-player (ZYPP Patch Number 8476)
2013-03-01 00:00:00
RHEL 5 / 6 : flash-plugin (RHSA-2013:0574)
2013-02-28 00:00:00
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities -01 (Mar 2013) - Linux
2013-03-04 00:00:00
Adobe Flash Player Multiple Vulnerabilities -01 (Mar 2013) - Mac OS X
2013-03-04 00:00:00
Adobe Flash Player Multiple Vulnerabilities -01 March13 (Windows)
2013-03-04 00:00:00
suse
suse
flash-player to 11.2.202.273 (critical)
2013-02-28 18:26:44
flash-player to 11.2.202.273 (critical)
2013-02-28 17:05:42
flash-player to 11.2.202.273 (critical)
2013-02-28 14:05:45
redhat
redhat
(RHSA-2013:0574) Critical: flash-plugin security update
2013-02-27 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2013-02-26 00:00:00
threatpost
threatpost
Adobe Patches Two Critical Flash Player Vulnerabilities
2013-02-26 21:26:24
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2013-03-03 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2013-09-14 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.6%

JSON
Related for NVD:CVE-2013-0643
cvelist1cve1prion1ubuntucve1cisa1nessus9openvas11suse4redhat1freebsd1threatpost1securityvulns1gentoo1