CVE-2013-0650

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:C/I:C/A:C
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
VendorProductVersion
adobeflash_player
𝑥
≤ 11.6.602.171
adobeflash_player
11.0
adobeflash_player
11.0.1.152
adobeflash_player
11.0.1.152
adobeflash_player
11.0.1.153
adobeflash_player
11.1
adobeflash_player
11.1.102.55
adobeflash_player
11.1.102.55
adobeflash_player
11.1.102.59
adobeflash_player
11.1.102.62
adobeflash_player
11.1.102.63
adobeflash_player
11.1.111.5
adobeflash_player
11.1.111.6
adobeflash_player
11.1.111.7
adobeflash_player
11.1.111.8
adobeflash_player
11.1.115.7
adobeflash_player
11.1.115.34
adobeflash_player
11.1.115.36
adobeflash_player
11.2.202.223
adobeflash_player
11.2.202.228
adobeflash_player
11.2.202.233
adobeflash_player
11.2.202.235
adobeflash_player
11.2.202.236
adobeflash_player
11.2.202.238
adobeflash_player
11.2.202.243
adobeflash_player
11.2.202.251
adobeflash_player
11.2.202.258
adobeflash_player
11.2.202.261
adobeflash_player
11.2.202.262
adobeflash_player
11.2.202.270
adobeflash_player
11.2.202.273
adobeflash_player
11.3.300.257
adobeflash_player
11.3.300.262
adobeflash_player
11.3.300.265
adobeflash_player
11.3.300.268
adobeflash_player
11.3.300.270
adobeflash_player
11.3.300.271
adobeflash_player
11.3.300.273
adobeflash_player
11.4.402.265
adobeflash_player
11.4.402.278
adobeflash_player
11.4.402.287
adobeflash_player
11.5.502.110
adobeflash_player
11.5.502.135
adobeflash_player
11.5.502.136
adobeflash_player
11.5.502.146
adobeflash_player
11.5.502.149
adobeflash_player
11.6.602.167
adobeflash_player
11.6.602.168
adobeflash_player
𝑥
≤ 11.2.202.273
adobeflash_player
11.0
adobeflash_player
11.0.1.152
adobeflash_player
11.0.1.152
adobeflash_player
11.0.1.153
adobeflash_player
11.1
adobeflash_player
11.1.102.55
adobeflash_player
11.1.102.55
adobeflash_player
11.1.102.59
adobeflash_player
11.1.102.62
adobeflash_player
11.1.102.63
adobeflash_player
11.1.111.5
adobeflash_player
11.1.111.6
adobeflash_player
11.1.111.7
adobeflash_player
11.1.111.8
adobeflash_player
11.1.115.7
adobeflash_player
11.1.115.34
adobeflash_player
11.1.115.36
adobeflash_player
11.2.202.223
adobeflash_player
11.2.202.228
adobeflash_player
11.2.202.233
adobeflash_player
11.2.202.235
adobeflash_player
11.2.202.236
adobeflash_player
11.2.202.238
adobeflash_player
11.2.202.243
adobeflash_player
11.2.202.251
adobeflash_player
11.2.202.258
adobeflash_player
11.2.202.261
adobeflash_player
11.2.202.262
adobeflash_player
11.2.202.270
adobeflash_player_for_android
𝑥
≤ 11.1.111.43
adobeflash_player_for_android
𝑥
≤ 11.1.111.43
adobeflash_player_for_android
10.1.106.17
adobeflash_player_for_android
10.2.157.51
adobeflash_player_for_android
10.3.186.7
adobeflash_player_for_android
11.0.1.153
adobeflash_player_for_android
11.1.102.59
adobeflash_player_for_android
11.1.111.5
adobeflash_player_for_android
11.1.111.6
adobeflash_player_for_android
11.1.111.7
adobeflash_player_for_android
11.1.111.8
adobeflash_player_for_android
11.1.111.9
adobeflash_player_for_android
11.1.111.10
adobeflash_player_for_android
11.1.111.16
adobeflash_player_for_android
11.1.111.19
adobeflash_player_for_android
11.1.111.24
adobeflash_player_for_android
11.1.111.29
adobeflash_player_for_android
11.1.111.31
adobeflash_player_for_android
11.1.111.32
adobeflash_player_for_android
𝑥
≤ 11.1.111.43
adobeflash_player_for_android
10.1.106.17
adobeflash_player_for_android
10.2.157.51
adobeflash_player_for_android
10.3.186.7
adobeflash_player_for_android
11.0.1.153
adobeflash_player_for_android
11.1.102.59
adobeflash_player_for_android
11.1.111.5
adobeflash_player_for_android
11.1.111.6
adobeflash_player_for_android
11.1.111.7
adobeflash_player_for_android
11.1.111.8
adobeflash_player_for_android
11.1.111.9
adobeflash_player_for_android
11.1.111.10
adobeflash_player_for_android
11.1.111.16
adobeflash_player_for_android
11.1.111.19
adobeflash_player_for_android
11.1.111.24
adobeflash_player_for_android
11.1.111.29
adobeflash_player_for_android
11.1.111.31
adobeflash_player_for_android
11.1.111.32
adobeadobe_air_sdk_and_compiler
𝑥
≤ 3.6.0.599
adobeadobe_air_sdk
𝑥
≤ 3.6.0.597
adobeadobe_air_sdk
3.0.0.4080
adobeadobe_air_sdk
3.1.0.488
adobeadobe_air_sdk
3.2.0.2070
adobeadobe_air_sdk
3.3.0.3650
adobeadobe_air_sdk
3.3.0.3690
adobeadobe_air_sdk
3.4.0.2540
adobeadobe_air_sdk
3.4.0.2710
adobeadobe_air_sdk
3.5.0.600
adobeadobe_air_sdk
3.5.0.880
adobeadobe_air_sdk
3.5.0.890
adobeadobe_air_sdk
3.5.0.1060
adobeadobe_air
𝑥
≤ 3.6.0.597
adobeadobe_air
1.0
adobeadobe_air
1.0.1
adobeadobe_air
1.0.8.4990
adobeadobe_air
1.0.4990
adobeadobe_air
1.1
adobeadobe_air
1.1.0.5790
adobeadobe_air
1.5
adobeadobe_air
1.5.0.7220
adobeadobe_air
1.5.1
adobeadobe_air
1.5.1.8210
adobeadobe_air
1.5.2
adobeadobe_air
1.5.3
adobeadobe_air
1.5.3.9120
adobeadobe_air
1.5.3.9130
adobeadobe_air
2.0.2
adobeadobe_air
2.0.2.12610
adobeadobe_air
2.0.3
adobeadobe_air
2.0.3.13070
adobeadobe_air
2.0.4
adobeadobe_air
2.5.0.16600
adobeadobe_air
2.5.1.17730
adobeadobe_air
2.6
adobeadobe_air
2.6.0.19120
adobeadobe_air
2.6.0.19140
adobeadobe_air
2.7
adobeadobe_air
2.7.0.1948
adobeadobe_air
2.7.0.1953
adobeadobe_air
2.7.0.19480
adobeadobe_air
2.7.0.19530
adobeadobe_air
2.7.1
adobeadobe_air
2.7.1.19610
adobeadobe_air
3.0.0.408
adobeadobe_air
3.0.0.4080
adobeadobe_air
3.1.0.485
adobeadobe_air
3.1.0.488
adobeadobe_air
3.1.0.4880
adobeadobe_air
3.2.0.207
adobeadobe_air
3.2.0.2070
adobeadobe_air
3.3.0.3670
adobeadobe_air
3.4.0.2540
adobeadobe_air
3.4.0.2710
adobeadobe_air
3.5.0.600
adobeadobe_air
3.5.0.880
adobeadobe_air
3.5.0.890
adobeadobe_air
3.5.0.1060
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
quantal
Fixed 11.2.202.275-0quantal1
released
precise
Fixed 11.2.202.275-0precise1
released
oneiric
Fixed 11.2.202.275-0oneiric1
released
lucid
Fixed 11.2.202.275-0lucid1
released
hardy
ignored
flashplugin-nonfree
quantal
Fixed 11.2.202.275ubuntu0.12.10.1
released
precise
Fixed 11.2.202.275ubuntu0.12.04.1
released
oneiric
Fixed 11.2.202.275ubuntu0.11.10.1
released
lucid
Fixed 11.2.202.275ubuntu0.10.04.1
released
hardy
ignored
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html
http://marc.info/?l=bugtraq&m=139455789818399&w=2
http://rhn.redhat.com/errata/RHSA-2013-0643.html
http://www.adobe.com/support/security/bulletins/apsb13-09.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html
http://marc.info/?l=bugtraq&m=139455789818399&w=2
http://rhn.redhat.com/errata/RHSA-2013-0643.html
http://www.adobe.com/support/security/bulletins/apsb13-09.html