CVE-2013-5330
Severity CVSS v4.0:
Pending analysis
Type:
CWE-119
Buffer Errors
Publication date:
13/11/2013
Last modified:
13/12/2018
Description
Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | 11.0 (including) | 11.7.700.252 (excluding) |
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | 11.8 (including) | 11.8.800.175 (excluding) |
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | 11.9 (including) | 11.9.900.152 (excluding) |
cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | 11.0 (including) | 11.2.202.327 (excluding) |
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* | 3.9.0.1210 (excluding) | |
cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:* | 3.9.0.1210 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00019.html
- http://rhn.redhat.com/errata/RHSA-2013-1518.html
- http://www.adobe.com/support/security/bulletins/apsb13-26.html