PT-2013-3115 · Adobe+2 · Flash Player+4

Publicado 2013-02-12 · Atualizado 2018-12-06 · CVE-2013-1374

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe AIR (affected versions not specified) Adobe AIR SDK (affected versions not specified)

Description The issue is related to a "use after free" problem in Adobe Flash Player, Adobe AIR, and Adobe AIR SDK, which allows attackers to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-1374

OPENSUSE-SU-2013_0295-1

OPENSUSE-SU-2013_0295-2

OPENSUSE-SU-2013_0298-1

RHSA-2013:0254

RHSA-2013_0254

Produtos afetados

Air

Air Sdk

Flash Player

Red Hat

Suse

Referências · 48

• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html · Aviso do Fabricante
• http://support.novell.com/security/cve/CVE-2013-0647.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-0638 · Nota
• https://access.redhat.com/security/cve/CVE-2013-1365 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/QKTRQZYYNCTFCMKMPOYB3QI55TEN73QC · Nota
• https://access.redhat.com/security/cve/CVE-2013-1367 · Nota
• http://support.novell.com/security/cve/CVE-2013-0637.html · Nota
• http://support.novell.com/security/cve/CVE-2013-1370.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-1374 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-1374 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2013-0649 · Nota
• http://us-cert.gov/cas/techalerts/TA13-043A.html · Nota
• https://access.redhat.com/security/cve/CVE-2013-0644 · Nota
• http://support.novell.com/security/cve/CVE-2013-0649.html · Nota
• https://bugzilla.novell.com/803485 · Nota