NetSight
IP …
high8.8Known exploited

CVE-2013-0648

Adobe Flash Player Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2024-09-17. Federal due date: 2024-10-08.

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Impact

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Affected products

VendorProductAffected versions
AdobeFlash Player
before 10.3.183.67
from 11.0 before 11.6.602.171
from 11.0 before 11.2.202.273
OpensuseOpensuse
Versions 11.4, 12.1
SuseLinux Enterprise Desktop
Versions 10, 11
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.4
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Versions 5.9, 6.4
RedhatEnterprise Linux Workstation
Version 6.0

References