CVE-2013-5330 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe AIR

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer16 documents7 sources

Severity

10.0CRITICALNVD

EPSS

2.9%

top 13.53%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe AIR Adobe AIR SDK Adobe Flash Player

Timeline

PublishedNov 13

Latest updateMay 14

Description

Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDadobe/flash_player11.0 — 11.7.700.252+3

▶NVDadobe/air< 3.9.0.1210

▶NVDadobe/air_sdk< 3.9.0.1210

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-jj82-mwc3-9h8h: Adobe Flash Player before 11↗2022-05-14

▶

GHSA

GHSA-j473-h6vv-fh38: Adobe Flash Player before 11↗2022-05-14

▶

CVEList

CVE-2013-5330: Adobe Flash Player before 11↗2013-11-13

▶

CVEList

CVE-2013-5329: Adobe Flash Player before 11↗2013-11-13

▶

VulnCheck

Adobe Flash Player Improper Restriction of Operations within the Bounds of a Memory Buffer↗2013

▶

📋Vendor Advisories

Red Hat

flash-plugin: multiple code execution flaws (APSB13-26)↗2013-11-12

▶

Red Hat

flash-plugin: multiple code execution flaws (APSB13-26)↗2013-11-12

▶