// For flags

CVE-2013-0648

Adobe Flash Player Code Execution Vulnerability

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

Act
*SSVC
Descriptions

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Vulnerabilidad sin especificar en la funcionalidad ExternalInterface ActionScript de Adobe Flash Player antes de v10.3.183.67 y v11.x antes de v11.6.602.171 para Windows y Mac OS X, y antes de v10.3.183.67 y v11.x antes de v11.2.202.273 para Linux, que permite a atacantes remotos ejecutar código arbitrario con contenido SWF hecho a mano, como los explotados en febrero de 2013

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:Act
Exploitation
Active
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2012-12-18 CVE Reserved
  • 2013-02-27 CVE Published
  • 2024-09-17 Exploited in Wild
  • 2024-09-20 CVE Updated
  • 2024-09-20 EPSS Updated
  • 2024-10-08 KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Adobe
Search vendor "Adobe"
 Flash Player
Search vendor "Adobe" for product "Flash Player"
 >= 10.3 < 10.3.183.67
Search vendor "Adobe" for product "Flash Player" and version " >= 10.3 < 10.3.183.67"
-
Affected
in Apple
Search vendor "Apple"
 Mac Os X
Search vendor "Apple" for product "Mac Os X"
--
Safe
Adobe
Search vendor "Adobe"
 Flash Player
Search vendor "Adobe" for product "Flash Player"
 >= 10.3 < 10.3.183.67
Search vendor "Adobe" for product "Flash Player" and version " >= 10.3 < 10.3.183.67"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows
Search vendor "Microsoft" for product "Windows"
--
Safe
Adobe
Search vendor "Adobe"
 Flash Player
Search vendor "Adobe" for product "Flash Player"
 >= 11.6 < 11.6.602.171
Search vendor "Adobe" for product "Flash Player" and version " >= 11.6 < 11.6.602.171"
-
Affected
in Apple
Search vendor "Apple"
 Mac Os X
Search vendor "Apple" for product "Mac Os X"
--
Safe
Adobe
Search vendor "Adobe"
 Flash Player
Search vendor "Adobe" for product "Flash Player"
 >= 11.6 < 11.6.602.171
Search vendor "Adobe" for product "Flash Player" and version " >= 11.6 < 11.6.602.171"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows
Search vendor "Microsoft" for product "Windows"
--
Safe
Adobe
Search vendor "Adobe"
 Flash Player
Search vendor "Adobe" for product "Flash Player"
 >= 10.3 < 10.3.183.67
Search vendor "Adobe" for product "Flash Player" and version " >= 10.3 < 10.3.183.67"
-
Affected
in Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
--
Safe
Adobe
Search vendor "Adobe"
 Flash Player
Search vendor "Adobe" for product "Flash Player"
 >= 11.2 < 11.2.202.273
Search vendor "Adobe" for product "Flash Player" and version " >= 11.2 < 11.2.202.273"
-
Affected
in Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
--
Safe