CVE-2013-5332

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://helpx.adobe.com/security/products/flash-player/apsb13-28.htmlPatch, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1818.htmlThird Party Advisory
http://helpx.adobe.com/security/products/flash-player/apsb13-28.htmlPatch, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1818.htmlThird Party Advisory

Timeline

Published: Dec 11, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-533310.0Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns CVE-2013-533410.0Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns CVE-2013-53497.5Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted CVE-2013-53507.5The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 befo CVE-2013-53517.5Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file.CVE-2013-53526.8Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) activities_text parameter to servi CVE-2013-53536.8Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote a CVE-2013-53547.5Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id CVE-2013-53556.8Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hijack the authentication of admin CVE-2013-53567.5Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers t CVE-2013-53577.5Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF CVE-2013-53587.5Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demon