PT-2013-4306 · Microsoft+6 · Windows+8

Published 2013-06-12 · Updated 2018-12-13 · CVE-2013-3343

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.90 and 11.x prior to 11.7.700.224 on Windows Adobe Flash Player versions prior to 10.3.183.90 and 11.x prior to 11.7.700.225 on Mac OS X Adobe Flash Player versions prior to 10.3.183.90 and 11.x prior to 11.2.202.291 on Linux Adobe Flash Player versions prior to 11.1.111.59 on Android 2.x and 3.x Adobe Flash Player versions prior to 11.1.115.63 on Android 4.x Adobe AIR versions prior to 3.7.0.2090 on Windows and Android Adobe AIR versions prior to 3.7.0.2100 on Mac OS X Adobe AIR SDK & Compiler versions prior to 3.7.0.2090 on Windows Adobe AIR SDK & Compiler versions prior to 3.7.0.2100 on Mac OS X

Description The issue allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors, resulting in memory corruption.

Recommendations For Adobe Flash Player on Windows, update to version 10.3.183.90 or later, or 11.7.700.224 or later. For Adobe Flash Player on Mac OS X, update to version 10.3.183.90 or later, or 11.7.700.225 or later. For Adobe Flash Player on Linux, update to version 10.3.183.90 or later, or 11.2.202.291 or later. For Adobe Flash Player on Android 2.x and 3.x, update to version 11.1.111.59 or later. For Adobe Flash Player on Android 4.x, update to version 11.1.115.63 or later. For Adobe AIR on Windows and Android, update to version 3.7.0.2090 or later. For Adobe AIR on Mac OS X, update to version 3.7.0.2100 or later. For Adobe AIR SDK & Compiler on Windows, update to version 3.7.0.2090 or later. For Adobe AIR SDK & Compiler on Mac OS X, update to version 3.7.0.2100 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3343

MGASA-2013-0177

RHSA-2013:0941

RHSA-2013_0941

SUSE-SU-2013_1039-1

SUSE-SU-2013_1039-2

Affected Products

Air

Air Sdk & Compiler

Flash Player

Android

Linux

Macos X

Red Hat

Suse

Windows

References · 22

• https://advisories.mageia.org/MGASA-2013-0177.html · Security Note
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00179.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-3343 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3343 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00016.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0941.html · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb13-16.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2013-0177 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00164.html · Vendor Advisory
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• https://lists.suse.com/pipermail/sle-security-updates/2013-June/000486.html · Note
• https://lists.suse.com/pipermail/sle-security-updates/2013-July/000509.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17030 · Note
• https://access.redhat.com/security/cve/CVE-2013-3343 · Note
• http://support.novell.com/security/cve/CVE-2013-3343.html · Note