PT-2013-4291 · Adobe+2 · Flash Player+4

Published 2013-05-15 · Updated 2020-08-25 · CVE-2013-3328

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe AIR (affected versions not specified) Adobe AIR SDK & Compiler (affected versions not specified)

Description The issue allows an attacker to execute arbitrary code or cause a denial of service due to a memory error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3328

OPENSUSE-SU-2013_0892-1

OPENSUSE-SU-2013_0954-1

RHSA-2013:0825

RHSA-2013_0825

Affected Products

Air

Air Sdk & Compiler

Flash Player

Red Hat

Suse

References · 39

• http://adobe.com/support/security/bulletins/apsb13-14.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00010.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-3328 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-0825.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00003.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00003.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2013:0825 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16995 · Note
• https://access.redhat.com/security/cve/CVE-2013-3325 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3328 · Note
• https://access.redhat.com/security/cve/CVE-2013-3334 · Note
• https://bugzilla.novell.com/819916 · Note
• http://support.novell.com/security/cve/CVE-2013-2728.html · Note
• http://support.novell.com/security/cve/CVE-2013-3328.html · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/NFWKLDRICKVE7DFSECKDCFUY3HDHC3S5 · Note