PT-2013-3115 · Adobe+2 · Flash Player+4

Published 2013-02-12 · Updated 2018-12-06 · CVE-2013-1374

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe AIR (affected versions not specified) Adobe AIR SDK (affected versions not specified)

Description The issue is related to a "use after free" problem in Adobe Flash Player, Adobe AIR, and Adobe AIR SDK, which allows attackers to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2013-1374

OPENSUSE-SU-2013_0295-1

OPENSUSE-SU-2013_0295-2

OPENSUSE-SU-2013_0298-1

RHSA-2013:0254

RHSA-2013_0254

Affected Products

Air

Air Sdk

Flash Player

Red Hat

Suse

References · 48

• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1374 · Security Note
• http://adobe.com/support/security/bulletins/apsb13-05.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0254.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html · Vendor Advisory
• http://support.novell.com/security/cve/CVE-2013-0647.html · Note
• https://access.redhat.com/security/cve/CVE-2013-0638 · Note
• https://access.redhat.com/security/cve/CVE-2013-1365 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/QKTRQZYYNCTFCMKMPOYB3QI55TEN73QC · Note
• https://access.redhat.com/security/cve/CVE-2013-1367 · Note
• http://support.novell.com/security/cve/CVE-2013-0637.html · Note
• http://support.novell.com/security/cve/CVE-2013-1370.html · Note
• https://access.redhat.com/security/cve/CVE-2013-1374 · Note
• https://access.redhat.com/security/cve/CVE-2013-0649 · Note