Unscored severity · published May 16, 2013
CVE-2013-3333
Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android…
–
CVSS
5.4%
EPSS
No
On KEV
Description
Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3334, and CVE-2013-3335.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.4% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Adobe Air · Adobe
before 3.7.0.1860 · source: NVD
AA
Adobe Air Sdk · Adobe
before 3.7.0.1860 · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
5.9; 6.4 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
5.9; 6.4 · source: NVD
EL
Enterprise Linux Workstation · Redhat
6.0 · source: NVD
FP
Flash Player · Adobe
before 10.3.183.86; 11.0 before 11.7.700.202; before 10.3.183.86; 11.0 before 11.2.202.285; before 11.1.111.54; before 11.1.115.58 · source: NVD
LE
Linux Enterprise Desktop · Suse
10; 11 · source: NVD
OP
Opensuse · Opensuse
11.4; 12.2; 12.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3333
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3333
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00003.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00003.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00010.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0825.html
Broken Link
http://secunia.com/advisories/53442
Patch
http://www.adobe.com/support/security/bulletins/apsb13-14.html
More from Adobe Air
8.8
CVE-2014-0502
Adobe Flash Player Double Free Vulnerablity
8.8
CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability
–
CVE-2015-0309
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before…
–
CVE-2015-0308
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before…
–
CVE-2015-0307
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X…