CVE-2013-5329
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@adobe.com — http://www.adobe.com/support/security/bulletins/apsb13-26.html
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| linux-kernel | - | not-affected | |
| macos | - | not-affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| adobe | flash_player | {"startIncluding":"11.0","endExcluding":"11.7.700.252"} | 11.7.700.252 |
| adobe | air | {"endExcluding":"3.9.0.1210"} | 3.9.0.1210 |
| adobe | air_sdk | {"endExcluding":"3.9.0.1210"} | 3.9.0.1210 |
References
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00019.html
- http://rhn.redhat.com/errata/RHSA-2013-1518.html
- http://www.adobe.com/support/security/bulletins/apsb13-26.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00019.html
- http://rhn.redhat.com/errata/RHSA-2013-1518.html
- http://www.adobe.com/support/security/bulletins/apsb13-26.html
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.