Integer overflow

2013-03-1110:55:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.322 Low

EPSS

Percentile

97.0%

JSON

Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

CPENameOperatorVersion
airle3.6.0.6090
flash_playerle11.1.115.48
flash_playerle11.1.111.44
flash_playerge11.0
flash_playerle11.6.602.180
flash_playerge11.0
flash_playerle11.2.202.275
flash_playerlt10.3.183.75
flash_playerle10.3.183.75
opensuseeq12.3

Name	Operator	Version
air	le	3.6.0.6090
flash_player	le	11.1.115.48
flash_player	le	11.1.111.44
flash_player	ge	11.0
flash_player	le	11.6.602.180
flash_player	ge	11.0
flash_player	le	11.2.202.275
flash_player	lt	10.3.183.75
flash_player	le	10.3.183.75
opensuse	eq	12.3