critical10.0
CVE-2013-1379
Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11…
Impact
Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Adobe Air Sdk | through 3.6.0.6090 Version 3.6.0.599 |
| Adobe | Flash Player | through 10.3.183.68 Versions 6.0.21.0, 6.0.79, 7.0, 7.0.1, 7.0.14.0 |
| Adobe | Adobe Air | through 3.6.0.6090 Version 3.6.0.597 |
| Novell | Suse Linux Enterprise Desktop | Version 11.0 |
| Opensuse | Opensuse | Versions 11.4, 12.1, 12.2, 12.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html
- http://marc.info/?l=bugtraq&m=139455789818399&w=2
- http://rhn.redhat.com/errata/RHSA-2013-0730.html
- http://www.adobe.com/support/security/bulletins/apsb13-11.html
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html
- http://marc.info/?l=bugtraq&m=139455789818399&w=2
- http://rhn.redhat.com/errata/RHSA-2013-0730.html
- http://www.adobe.com/support/security/bulletins/apsb13-11.html