Lucene search

K
zdiVulnazoidZDI-13-177
HistoryJul 26, 2013 - 12:00 a.m.

Adobe Flash Player Integer Overflow Remote Code Execution Vulnerability

2013-07-2600:00:00
vulnazoid
www.zerodayinitiative.com
12

0.023 Low

EPSS

Percentile

89.7%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the PCM processing code. By providing a malformed audio sample through ActionScript3, an attacker can cause an integer overflow. Using this overflow, an attacker can execute arbitrary code in the context of the Flash player.