Lucene search
HistoryApr 10, 2013 - 3:48 a.m.
CVE-2013-1385
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.003
Percentile
70.9%
Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
Affected configurations
Node
adobeshockwave_playerRange≤12.0.0.112
ORadobeshockwave_playerMatch1.0
ORadobeshockwave_playerMatch2.0
ORadobeshockwave_playerMatch3.0
ORadobeshockwave_playerMatch4.0
ORadobeshockwave_playerMatch5.0
ORadobeshockwave_playerMatch6.0
ORadobeshockwave_playerMatch8.0
ORadobeshockwave_playerMatch8.0.196
ORadobeshockwave_playerMatch8.0.196a
ORadobeshockwave_playerMatch8.0.204
ORadobeshockwave_playerMatch8.0.205
ORadobeshockwave_playerMatch8.5.1
ORadobeshockwave_playerMatch8.5.1.100
ORadobeshockwave_playerMatch8.5.1.103
ORadobeshockwave_playerMatch8.5.1.105
ORadobeshockwave_playerMatch8.5.1.106
ORadobeshockwave_playerMatch8.5.321
ORadobeshockwave_playerMatch8.5.323
ORadobeshockwave_playerMatch8.5.324
ORadobeshockwave_playerMatch8.5.325
ORadobeshockwave_playerMatch9
ORadobeshockwave_playerMatch9.0.383
ORadobeshockwave_playerMatch9.0.432
ORadobeshockwave_playerMatch10.0.0.210
ORadobeshockwave_playerMatch10.0.1.004
ORadobeshockwave_playerMatch10.1.0.11
ORadobeshockwave_playerMatch10.1.0.011
ORadobeshockwave_playerMatch10.1.1.016
ORadobeshockwave_playerMatch10.1.4.020
ORadobeshockwave_playerMatch10.2.0.021
ORadobeshockwave_playerMatch10.2.0.022
ORadobeshockwave_playerMatch10.2.0.023
ORadobeshockwave_playerMatch11.0.0.456
ORadobeshockwave_playerMatch11.0.3.471
ORadobeshockwave_playerMatch11.5.0.595
ORadobeshockwave_playerMatch11.5.0.596
ORadobeshockwave_playerMatch11.5.1.601
ORadobeshockwave_playerMatch11.5.2.602
ORadobeshockwave_playerMatch11.5.6.606
ORadobeshockwave_playerMatch11.5.7.609
ORadobeshockwave_playerMatch11.5.8.612
ORadobeshockwave_playerMatch11.5.9.615
ORadobeshockwave_playerMatch11.5.9.620
ORadobeshockwave_playerMatch11.5.10.620
ORadobeshockwave_playerMatch11.6.0.626
ORadobeshockwave_playerMatch11.6.1.629
ORadobeshockwave_playerMatch11.6.3.633
ORadobeshockwave_playerMatch11.6.4.634
ORadobeshockwave_playerMatch11.6.5.635
ORadobeshockwave_playerMatch11.6.6.636
ORadobeshockwave_playerMatch11.6.7.637
ORadobeshockwave_playerMatch11.6.8.638
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | shockwave_player | * | cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:* |
| adobe | shockwave_player | 1.0 | cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:* |
| adobe | shockwave_player | 2.0 | cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:* |
| adobe | shockwave_player | 3.0 | cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:* |
| adobe | shockwave_player | 4.0 | cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:* |
| adobe | shockwave_player | 5.0 | cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:* |
| adobe | shockwave_player | 6.0 | cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:* |
| adobe | shockwave_player | 8.0 | cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:* |
| adobe | shockwave_player | 8.0.196 | cpe:2.3:a:adobe:shockwave_player:8.0.196:*:*:*:*:*:*:* |
| adobe | shockwave_player | 8.0.196a | cpe:2.3:a:adobe:shockwave_player:8.0.196a:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-1385
2013-04-10 01:00:00
prion
prion
Design/Logic Flaw
2013-04-10 03:48:00
cve
cve
CVE-2013-1385
2013-04-10 03:48:20
openvas
openvas
Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 (Mac OS X)
2013-04-19 00:00:00
Adobe Shockwave Player Multiple Vulnerabilities -01 (Apr 2013) - Mac OS X
2013-04-19 00:00:00
Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 (Windows)
2013-04-19 00:00:00
securityvulns
securityvulns
Adobe Shockwave Player Multiple security vulnerabilities
2013-04-22 00:00:00
nessus
nessus
Adobe Shockwave Player <= 12.0.0.112 Multiple Vulnerabilities (APSB13-12) (Mac OS X)
2014-12-22 00:00:00
Shockwave Player <= 12.0.0.112 Multiple Vulnerabilities (APSB13-12)
2013-04-10 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2013-04-09 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.003
Percentile
70.9%
Related for NVD:CVE-2013-1385