NetSight
IP …
critical9.3Public exploit code

CVE-2013-5331

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.

Affected products

VendorProductAffected versions
AdobeFlash Player
from 11.0 before 11.7.700.257
from 11.8 before 11.8.800.175
from 11.9 before 11.9.900.700
from 11.0 before 11.2.202.332
AdobeAir
before 3.9.0.1380
AdobeAir Sdk
before 3.9.0.1380

Weakness classification

CWE-94

References