10

CVE-2013-3343

Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
AdobeFlash Player Version >= 10.0 < 10.3.183.90
   MicrosoftWindows Version-
AdobeFlash Player Version >= 11.0 < 11.7.700.224
   MicrosoftWindows Version-
AdobeFlash Player Version >= 10.0 < 10.3.183.90
   LinuxLinux Kernel Version-
AdobeFlash Player Version >= 11.0 < 11.2.202.291
   LinuxLinux Kernel Version-
AdobeFlash Player Version >= 11.0 < 11.1.111.59
   GoogleAndroid Version >= 2.0 <= 2.3.7
   GoogleAndroid Version >= 3.0 <= 3.2.6
AdobeFlash Player Version >= 11.0 < 11.1.115.63
   GoogleAndroid Version >= 4.0 <= 4.4.4
AdobeAir Version < 3.7.0.2090
   GoogleAndroid Version-
   MicrosoftWindows Version-
AdobeFlash Player Version >= 10.0 < 10.3.183.90
   ApplemacOS X Version-
AdobeFlash Player Version >= 11.0 < 11.7.700.225
   ApplemacOS X Version-
AdobeAir Sdk Version < 3.7.0.2090
   MicrosoftWindows Version-
AdobeAir Version < 3.7.0.2100
   ApplemacOS X Version-
AdobeAir Sdk Version < 3.7.0.2100
   ApplemacOS X Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.3% 0.89
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.