NetSight
IP …
high8.8Known exploited

CVE-2013-0643

Adobe Flash Player Incorrect Default Permissions Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2024-09-17. Federal due date: 2024-10-08.

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Impact

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Affected products

VendorProductAffected versions
AdobeFlash Player
before 10.3.183.67
from 11.0 before 11.6.602.171
from 11.0 before 11.2.202.273
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.4
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Versions 5.9, 6.4
RedhatEnterprise Linux Workstation
Version 6.0
OpensuseOpensuse
Versions 11.4, 12.1
SuseLinux Enterprise Desktop
Versions 10, 11

Weakness classification

CWE-269

References