PT-2013-4323 · Adobe+2 · Flash Player+4

Published 2013-09-10 · Updated 2018-12-13 · CVE-2013-3361

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe AIR (affected versions not specified) Adobe AIR SDK & Compiler (affected versions not specified)

Description The issue allows an attacker to execute arbitrary code or cause a denial of service due to a memory error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3361

MGASA-2013-0273

OPENSUSE-SU-2013_1456-1

RHSA-2013:1256

RHSA-2013_1256

SUSE-SU-2013_1464-1

Affected Products

Air

Air Sdk & Compiler

Flash Player

Red Hat

Suse

References · 32

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3362 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3363 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00002.html · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb13-21.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5324 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-3361 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3361 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1256.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00001.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-09/msg00040.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2013-0273 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2013-0273.html · Security Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/GE4ZXNB3ACKSYVQAGK66V3WZLIFY4RWP · Note
• http://support.novell.com/security/cve/CVE-2013-3363.html · Note