CVEvulnerability

CVE-2013-2555

10.0 HIGH Published 2013-03-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-03-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-190

Description

Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

Affected configurations

• adobe flash player (<= 11.1.115.48) • adobe flash player (<= 11.1.111.44) • adobe flash player (>= 11.0 <= 11.6.602.180) • adobe flash player (>= 11.0 <= 11.2.202.275) • adobe air (<= 3.6.0.6090) • opensuse opensuse 11.4 • opensuse opensuse 12.1 • opensuse opensuse 12.2 • opensuse opensuse 12.3 • suse linux enterprise desktop 11 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 5.9 • redhat enterprise linux eus 6.4 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 5.9 • redhat enterprise linux server aus 6.4 • redhat enterprise linux workstation 6.0 • adobe flash player (< 10.3.183.75) • adobe flash player (<= 10.3.183.75)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References