CVE-2013-0504 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Flash Player

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
5.1%
top 10.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Player
Timeline
PublishedFeb 27
Latest updateMay 5

Description

Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/flash_player10.3 — 10.3.183.67+2

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-86c6-f69r-wvg4: Buffer overflow in the broker service in Adobe Flash Player before 10↗2022-05-05
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: multiple code execution flaws (APSB13-08)↗2013-02-26
▶

💬Community

1
Bugzilla
CVE-2013-0504 CVE-2013-0648 flash-plugin: multiple code execution flaws (APSB13-08)↗2013-02-26
▶