CVE-2013-0648

CVE Published 2013-02-27
Related Vendor(s) redhat, suse, opensuse, adobe
Related Product(s) enterprise_linux_server_aus, enterprise_linux_desktop, enterprise_linux_workstation, flash_player, enterprise_linux_server, enterprise_linux_eus, linux_enterprise_desktop, opensuse
Exploitation Reported (CISA KEV) 2024-09-17
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References