NetSight
IP …
critical10.0

CVE-2013-0646

Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275…

Impact

Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 11.6.602.171
Versions 11.0, 11.0.1.152, 11.0.1.153, 11.1, 11.1.102.55
AdobeFlash Player For Android
through 11.1.111.43
Versions 10.1.106.17, 10.2.157.51, 10.3.186.7, 11.0.1.153, 11.1.102.59
AdobeAdobe Air Sdk And Compiler
through 3.6.0.599
AdobeAdobe Air Sdk
through 3.6.0.597
Versions 3.0.0.4080, 3.1.0.488, 3.2.0.2070, 3.3.0.3650, 3.3.0.3690
AdobeAdobe Air
All versions
through 3.6.0.597
Versions 1.0, 1.0.1, 1.0.8.4990, 1.0.4990

Weakness classification

CWE-189

References