PT-2013-4306 · Microsoft+6 · Windows+8

Publicado 2013-06-12 · Atualizado 2018-12-13 · CVE-2013-3343

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.90 and 11.x prior to 11.7.700.224 on Windows Adobe Flash Player versions prior to 10.3.183.90 and 11.x prior to 11.7.700.225 on Mac OS X Adobe Flash Player versions prior to 10.3.183.90 and 11.x prior to 11.2.202.291 on Linux Adobe Flash Player versions prior to 11.1.111.59 on Android 2.x and 3.x Adobe Flash Player versions prior to 11.1.115.63 on Android 4.x Adobe AIR versions prior to 3.7.0.2090 on Windows and Android Adobe AIR versions prior to 3.7.0.2100 on Mac OS X Adobe AIR SDK & Compiler versions prior to 3.7.0.2090 on Windows Adobe AIR SDK & Compiler versions prior to 3.7.0.2100 on Mac OS X

Description The issue allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors, resulting in memory corruption.

Recommendations For Adobe Flash Player on Windows, update to version 10.3.183.90 or later, or 11.7.700.224 or later. For Adobe Flash Player on Mac OS X, update to version 10.3.183.90 or later, or 11.7.700.225 or later. For Adobe Flash Player on Linux, update to version 10.3.183.90 or later, or 11.2.202.291 or later. For Adobe Flash Player on Android 2.x and 3.x, update to version 11.1.111.59 or later. For Adobe Flash Player on Android 4.x, update to version 11.1.115.63 or later. For Adobe AIR on Windows and Android, update to version 3.7.0.2090 or later. For Adobe AIR on Mac OS X, update to version 3.7.0.2100 or later. For Adobe AIR SDK & Compiler on Windows, update to version 3.7.0.2090 or later. For Adobe AIR SDK & Compiler on Mac OS X, update to version 3.7.0.2100 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-3343

MGASA-2013-0177

RHSA-2013:0941

RHSA-2013_0941

SUSE-SU-2013_1039-1

SUSE-SU-2013_1039-2

Produtos afetados

Air

Air Sdk & Compiler

Flash Player

Android

Linux

Macos X

Red Hat

Suse

Windows

Referências · 22

• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://advisories.mageia.org/MGASA-2013-0177.html · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2013-June/000486.html · Nota
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00179.html · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2013-July/000509.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3343 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17030 · Nota
• https://access.redhat.com/security/cve/CVE-2013-3343 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3343 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00016.html · Aviso do Fabricante
• http://support.novell.com/security/cve/CVE-2013-3343.html · Nota
• http://rhn.redhat.com/errata/RHSA-2013-0941.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2013:0941 · Nota
• http://adobe.com/support/security/bulletins/apsb13-16.html · Aviso do Fabricante
• http://download.novell.com/patch/finder/?keywords=eade46809046296377fc288dde27a404 · Nota