CVE-2013-2555 — Integer Overflow or Wraparound in Adobe Flash Player

CWE-190 — Integer Overflow or Wraparound6 documents5 sources
Severity
10.0CRITICALNVD
EPSS
7.1%
top 8.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Adobe Flash PlayerAdobe AIROpensuse+6 more
Timeline
PublishedMar 11
Latest updateMay 13

Description

Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages7 packages

▶NVDadobe/flash_player11.0 — 11.6.602.180+5
▶NVDadobe/air3.6.0.6090

Also affects: Enterprise Linux 5.9, 6.4

🔴Vulnerability Details

2
GHSA
GHSA-g22h-4p64-r22q: Integer overflow in Adobe Flash Player before 10↗2022-05-13
▶
CVEList
CVE-2013-2555: Integer overflow in Adobe Flash Player before 10↗2013-03-11
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: Remote attackers able to execute arbitrary code via vectors that leverage an 'overflow' (CanSecWest 2013)↗2013-03-07
▶

💬Community

2
Bugzilla
CVE-2013-1378 CVE-2013-1379 CVE-2013-1380 flash-plugin: multiple code execution flaws (APSB13-11)↗2013-04-09
▶
Bugzilla
CVE-2013-2555 flash-plugin: Remote attackers able to execute arbitrary code via vectors that leverage an 'overflow' (CanSecWest 2013)↗2013-03-11
▶
CVE-2013-2555 — Integer Overflow or Wraparound in Adobe | cvebase