1. CVE-Search
  2. CVE-2013-0648
ID CVE-2013-0648
Summary Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013. Per: http://www.adobe.com/support/security/bulletins/apsb13-08.html 'Flash Player 11.6.602.168 and earlier versions for Windows Flash Player 11.6.602.167 and earlier versions for Macintosh Flash Player 11.2.202.270 and earlier for Linux'
References
Vulnerable Configurations
  • cpe:2.3:a:adobe:flash_player:10.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.181.14:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.181.14:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.181.16:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.181.16:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.181.22:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.181.22:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.181.23:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.181.23:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.181.26:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.181.26:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.181.34:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.181.34:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.5:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.5:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.7:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.7:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.10:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.10:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.11:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.11:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.15:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.15:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.16:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.16:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.18:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.18:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.19:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.19:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.20:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.20:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.23:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.23:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.25:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.25:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.29:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.29:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.43:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.43:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.48:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.48:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.50:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.50:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.51:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.51:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.61:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.61:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.3.183.63:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.3.183.63:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.6.602.167:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.6.602.167:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.6.602.168:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.6.602.168:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
    cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.223:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.223:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.228:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.228:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.229:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.229:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.233:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.233:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.235:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.235:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.236:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.236:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.238:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.238:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.243:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.243:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.251:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.251:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.258:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.258:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.261:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.261:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.262:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.262:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:11.2.202.270:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:11.2.202.270:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 06-12-2018 - 19:51)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
redhat via4
advisories
rhsa
id RHSA-2013:0574
rpms
  • flash-plugin-0:11.2.202.273-1.el5
  • flash-plugin-0:11.2.202.273-1.el6
refmap via4
confirm http://www.adobe.com/support/security/bulletins/apsb13-08.html
suse
  • SUSE-SU-2013:0373
  • openSUSE-SU-2013:0359
  • openSUSE-SU-2013:0360
Last major update 06-12-2018 - 19:51
Published 27-02-2013 - 00:55
Last modified 06-12-2018 - 19:51
Back to Top