CVE-2013-0648

Warnung

EPSS 11.09%
Veröffentlicht 27.02.2013 00:55:01
Zuletzt bearbeitet 21.04.2026 20:57:26
Erkennungen
Login

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 9

NVD 14 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Flash Player Version < 10.3.183.67

Apple ≫ macOS X Version -
Microsoft ≫ Windows Version -

Adobe ≫ Flash Player Version >= 11.0 < 11.6.602.171

Apple ≫ macOS X Version -
Microsoft ≫ Windows Version -

Adobe ≫ Flash Player Version >= 11.0 < 11.2.202.273

Linux ≫ Linux Kernel Version -

Opensuse ≫ Opensuse Version 11.4

Opensuse ≫ Opensuse Version 12.1

Suse ≫ Linux Enterprise Desktop Version 10 Update sp4 SwEdition -

Suse ≫ Linux Enterprise Desktop Version 11 Update sp2

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Eus Version 5.9

Redhat ≫ Enterprise Linux Eus Version 6.4

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Aus Version 5.9

Redhat ≫ Enterprise Linux Server Aus Version 6.4

Redhat ≫ Enterprise Linux Workstation Version 6.0

17.09.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Adobe Flash Player Code Execution Vulnerability

Schwachstelle

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.

Beschreibung

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	11.09%	0.954

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C
CISA-ADP	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H