Unscored severity · published Mar 13, 2013
CVE-2013-0646
Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before…
–
CVSS
6.5%
EPSS
No
On KEV
Description
Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Adobe Air · Adobe
through 3.6.0.597; 1.0; 1.0.1; 1.0.8.4990; 1.0.4990; 1.1; +34 more · source: NVD
AA
Adobe Air Sdk · Adobe
through 3.6.0.597; 3.0.0.4080; 3.1.0.488; 3.2.0.2070; 3.3.0.3650; 3.3.0.3690; +6 more · source: NVD
AA
Adobe Air Sdk And Compiler · Adobe
through 3.6.0.599 · source: NVD
FP
Flash Player · Adobe
through 11.6.602.171; 11.0; 11.0.1.152; 11.0.1.152; 11.0.1.153; 11.1; +34 more · source: NVD
FP
Flash Player For Android · Adobe
through 11.1.111.43; through 11.1.111.43; 10.1.106.17; 10.2.157.51; 10.3.186.7; 11.0.1.153; +31 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0646
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0646
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html
marc.info
http://marc.info/?l=bugtraq&m=139455789818399&w=2
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-0643.html
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-09.html
More from Adobe Air
8.8
CVE-2014-0502
Adobe Flash Player Double Free Vulnerablity
8.8
CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability
–
CVE-2015-0309
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before…
–
CVE-2015-0308
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before…
–
CVE-2015-0307
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X…