Ubuntu.comUB:CVE-2013-0648CVE-2013-0648
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.057 Low
EPSS
Percentile
93.4%
Unspecified vulnerability in the ExternalInterface ActionScript
functionality in Adobe Flash Player before 10.3.183.67 and 11.x before
11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x
before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary
code via crafted SWF content, as exploited in the wild in February 2013.
Notes
| Author | Note |
|---|---|
| jdstrand | chriscoulson provides updates for partner (adobe-flashplugin) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | adobe-flashplugin | < 11.2.202.273-0lucid1 | UNKNOWN |
| ubuntu | 11.10 | noarch | adobe-flashplugin | < 11.2.202.273-0oneiric1 | UNKNOWN |
| ubuntu | 12.04 | noarch | adobe-flashplugin | < 11.2.202.273-0precise1 | UNKNOWN |
| ubuntu | 12.10 | noarch | adobe-flashplugin | < 11.2.202.273-0quantal1 | UNKNOWN |
| ubuntu | 10.04 | noarch | flashplugin-nonfree | < 11.2.202.273ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | flashplugin-nonfree | < 11.2.202.273ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | flashplugin-nonfree | < 11.2.202.273ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | flashplugin-nonfree | < 11.2.202.273ubuntu0.12.10.1 | UNKNOWN |
Related
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.057 Low
EPSS
Percentile
93.4%