Vulnerability CVE-2013-2555: Information

Description

Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

Severity: CRITICAL (10.0)

URL: https://nvd.nist.gov/vuln/detail/CVE-2013-2555
Published: March 11, 2013
Modified: Sept. 8, 2021
Error type identifier: CWE-190

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
  • Permissions Required
http://www.adobe.com/support/security/bulletins/apsb13-11.html
  • Vendor Advisory
SUSE-SU-2013:0670
  • Mailing List
  • Third Party Advisory
RHSA-2013:0730
  • Third Party Advisory
openSUSE-SU-2013:0675
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2013:0672
  • Mailing List
  • Third Party Advisory
http://twitter.com/VUPEN/statuses/309713355466227713
  • Broken Link
http://twitter.com/thezdi/statuses/309756927301283840
  • Third Party Advisory
20130418 VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555)
  • Broken Link
HPSBMU02948
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

      Configuration 2

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

      Configuration 3

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Configuration 4

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

      Configuration 5

      cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Configuration 6

      cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
      cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*
      cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
      cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
      cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*

      Configuration 7

      cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_eus:5.9:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*

      Configuration 8

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Configuration 9

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top