PT-2013-3123 · Adobe · Shockwave Player

Publicado 2013-04-10 · Atualizado 2013-04-10 · CVE-2013-1385

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.0.2.122

Description The issue allows attackers to bypass the ASLR protection mechanism, making it easier to exploit the system via unspecified vectors. This is due to the software not preventing access to address information.

Recommendations For versions prior to 12.0.2.122, update to version 12.0.2.122 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1385

Produtos afetados

Shockwave Player

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-1385 · Nota de Segurança
• http://adobe.com/support/security/bulletins/apsb13-12.html · Aviso do Fabricante