ID

VAR-201302-0143


CVE

CVE-2013-0638


TITLE

Adobe Flash Player Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2013-001480

DESCRIPTION

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0647. Adobe Flash Player Any code that could be executed or service disruption ( Memory corruption ) There is a vulnerability that becomes a condition. This vulnerability CVE-2013-0647 Is a different vulnerability.An attacker could execute arbitrary code or cause a denial of service ( Memory corruption ) There is a possibility of being put into a state. Failed exploit attempts will likely result in denial-of-service conditions. Note: This issue was previously covered in BID 57907 (Adobe Flash Player and AIR APSB13-05 Multiple Security Vulnerabilities), but has been given its own record to better document it. The product enables viewing of applications, content and video across screens and browsers. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2013:0254-01 Product: Red Hat Enterprise Linux Extras Advisory URL: https://rhn.redhat.com/errata/RHSA-2013-0254.html Issue date: 2013-02-13 CVE Names: CVE-2013-0637 CVE-2013-0638 CVE-2013-0639 CVE-2013-0642 CVE-2013-0644 CVE-2013-0645 CVE-2013-0647 CVE-2013-0649 CVE-2013-1365 CVE-2013-1366 CVE-2013-1367 CVE-2013-1368 CVE-2013-1369 CVE-2013-1370 CVE-2013-1372 CVE-2013-1373 CVE-2013-1374 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security bulletin APSB13-05, listed in the References section. Specially-crafted SWF content could cause flash-plugin to crash or, potentially, execute arbitrary code when a victim loads a page containing the malicious SWF content. (CVE-2013-0638, CVE-2013-0639, CVE-2013-0642, CVE-2013-0644, CVE-2013-0645, CVE-2013-0647, CVE-2013-0649, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, CVE-2013-1373, CVE-2013-1374) A flaw in flash-plugin could allow an attacker to obtain sensitive information if a victim were tricked into visiting a specially-crafted web page. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 910570 - flash-plugin: multiple code execution flaws (APSB13-05) 910571 - CVE-2013-0637 flash-plugin: information disclosure flaw (APSB13-05) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.270-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.270-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.270-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.270-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.270-1.el6.i686.rpm x86_64: flash-plugin-11.2.202.270-1.el6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.270-1.el6.i686.rpm x86_64: flash-plugin-11.2.202.270-1.el6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.270-1.el6.i686.rpm x86_64: flash-plugin-11.2.202.270-1.el6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.redhat.com/security/data/cve/CVE-2013-0637.html https://www.redhat.com/security/data/cve/CVE-2013-0638.html https://www.redhat.com/security/data/cve/CVE-2013-0639.html https://www.redhat.com/security/data/cve/CVE-2013-0642.html https://www.redhat.com/security/data/cve/CVE-2013-0644.html https://www.redhat.com/security/data/cve/CVE-2013-0645.html https://www.redhat.com/security/data/cve/CVE-2013-0647.html https://www.redhat.com/security/data/cve/CVE-2013-0649.html https://www.redhat.com/security/data/cve/CVE-2013-1365.html https://www.redhat.com/security/data/cve/CVE-2013-1366.html https://www.redhat.com/security/data/cve/CVE-2013-1367.html https://www.redhat.com/security/data/cve/CVE-2013-1368.html https://www.redhat.com/security/data/cve/CVE-2013-1369.html https://www.redhat.com/security/data/cve/CVE-2013-1370.html https://www.redhat.com/security/data/cve/CVE-2013-1372.html https://www.redhat.com/security/data/cve/CVE-2013-1373.html https://www.redhat.com/security/data/cve/CVE-2013-1374.html https://access.redhat.com/security/updates/classification/#critical http://www.adobe.com/support/security/bulletins/apsb13-05.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFRG2NzXlSAg2UNWIIRAjGKAJ4lnleOpb7dBn8s/DCk7wAK9qbQJACgm3Vs pnyD10c/hdKGIm0b1Kjv3eY= =+cgh -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker could entice a user to open specially crafted SWF content, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to bypass access restrictions. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.310" References ========== [ 1 ] CVE-2012-5248 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5248 [ 2 ] CVE-2012-5248 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5248 [ 3 ] CVE-2012-5249 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5249 [ 4 ] CVE-2012-5249 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5249 [ 5 ] CVE-2012-5250 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5250 [ 6 ] CVE-2012-5250 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5250 [ 7 ] CVE-2012-5251 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5251 [ 8 ] CVE-2012-5251 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5251 [ 9 ] CVE-2012-5252 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5252 [ 10 ] CVE-2012-5252 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5252 [ 11 ] CVE-2012-5253 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5253 [ 12 ] CVE-2012-5253 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5253 [ 13 ] CVE-2012-5254 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5254 [ 14 ] CVE-2012-5254 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5254 [ 15 ] CVE-2012-5255 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5255 [ 16 ] CVE-2012-5255 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5255 [ 17 ] CVE-2012-5256 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5256 [ 18 ] CVE-2012-5256 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5256 [ 19 ] CVE-2012-5257 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5257 [ 20 ] CVE-2012-5257 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5257 [ 21 ] CVE-2012-5258 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5258 [ 22 ] CVE-2012-5258 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5258 [ 23 ] CVE-2012-5259 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5259 [ 24 ] CVE-2012-5259 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5259 [ 25 ] CVE-2012-5260 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5260 [ 26 ] CVE-2012-5260 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5260 [ 27 ] CVE-2012-5261 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5261 [ 28 ] CVE-2012-5261 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5261 [ 29 ] CVE-2012-5262 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5262 [ 30 ] CVE-2012-5262 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5262 [ 31 ] CVE-2012-5263 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5263 [ 32 ] CVE-2012-5263 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5263 [ 33 ] CVE-2012-5264 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5264 [ 34 ] CVE-2012-5264 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5264 [ 35 ] CVE-2012-5265 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5265 [ 36 ] CVE-2012-5265 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5265 [ 37 ] CVE-2012-5266 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5266 [ 38 ] CVE-2012-5266 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5266 [ 39 ] CVE-2012-5267 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5267 [ 40 ] CVE-2012-5267 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5267 [ 41 ] CVE-2012-5268 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5268 [ 42 ] CVE-2012-5268 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5268 [ 43 ] CVE-2012-5269 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5269 [ 44 ] CVE-2012-5269 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5269 [ 45 ] CVE-2012-5270 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5270 [ 46 ] CVE-2012-5270 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5270 [ 47 ] CVE-2012-5271 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5271 [ 48 ] CVE-2012-5271 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5271 [ 49 ] CVE-2012-5272 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5272 [ 50 ] CVE-2012-5272 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5272 [ 51 ] CVE-2012-5274 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5274 [ 52 ] CVE-2012-5275 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5275 [ 53 ] CVE-2012-5276 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5276 [ 54 ] CVE-2012-5277 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5277 [ 55 ] CVE-2012-5278 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5278 [ 56 ] CVE-2012-5279 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5279 [ 57 ] CVE-2012-5280 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5280 [ 58 ] CVE-2012-5676 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5676 [ 59 ] CVE-2012-5677 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5677 [ 60 ] CVE-2012-5678 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5678 [ 61 ] CVE-2013-0504 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0504 [ 62 ] CVE-2013-0630 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0630 [ 63 ] CVE-2013-0633 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0633 [ 64 ] CVE-2013-0634 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0634 [ 65 ] CVE-2013-0637 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0637 [ 66 ] CVE-2013-0638 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0638 [ 67 ] CVE-2013-0639 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0639 [ 68 ] CVE-2013-0642 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0642 [ 69 ] CVE-2013-0643 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0643 [ 70 ] CVE-2013-0644 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0644 [ 71 ] CVE-2013-0645 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0645 [ 72 ] CVE-2013-0646 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0646 [ 73 ] CVE-2013-0647 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0647 [ 74 ] CVE-2013-0648 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0648 [ 75 ] CVE-2013-0649 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0649 [ 76 ] CVE-2013-0650 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0650 [ 77 ] CVE-2013-1365 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1365 [ 78 ] CVE-2013-1366 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1366 [ 79 ] CVE-2013-1367 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1367 [ 80 ] CVE-2013-1368 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1368 [ 81 ] CVE-2013-1369 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1369 [ 82 ] CVE-2013-1370 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1370 [ 83 ] CVE-2013-1371 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1371 [ 84 ] CVE-2013-1372 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1372 [ 85 ] CVE-2013-1373 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1373 [ 86 ] CVE-2013-1374 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1374 [ 87 ] CVE-2013-1375 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1375 [ 88 ] CVE-2013-1378 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1378 [ 89 ] CVE-2013-1379 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1379 [ 90 ] CVE-2013-1380 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1380 [ 91 ] CVE-2013-2555 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2555 [ 92 ] CVE-2013-2728 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2728 [ 93 ] CVE-2013-3343 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3343 [ 94 ] CVE-2013-3344 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3344 [ 95 ] CVE-2013-3345 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3345 [ 96 ] CVE-2013-3347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3347 [ 97 ] CVE-2013-3361 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3361 [ 98 ] CVE-2013-3362 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3362 [ 99 ] CVE-2013-3363 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3363 [ 100 ] CVE-2013-5324 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5324 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-201309-06.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2013 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Adobe Flash Player / AIR Multiple Vulnerabilities SECUNIA ADVISORY ID: SA52166 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/52166/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=52166 RELEASE DATE: 2013-02-12 DISCUSS ADVISORY: http://secunia.com/advisories/52166/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/52166/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=52166 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in Adobe Flash Player and AIR, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system. 1) Some unspecified errors can be exploited to cause buffer overflows. 2) Some use-after-free errors can be exploited to dereference already freed memory. 4) An unspecified error can be exploited to corrupt memory. 5) An unspecified error can be exploited to corrupt memory. 6) An unspecified error can be exploited to disclose certain sensitive information. Successful exploitation of vulnerabilities #1 through #5 may allow execution of arbitrary code. Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ PROVIDED AND/OR DISCOVERED BY: 1, 2, 5) The vendor credits Mateusz Jurczyk, Gynvael Coldwind, and Fermin Serna, Google 3) The vendor credits Natalie Silvanovich, BlackBerry Security, Research in Motion 4) The vendor credits Damian Put via iDefense 6) Reported by the vendor. ORIGINAL ADVISORY: Adobe (APSB13-05): http://www.adobe.com/support/security/bulletins/apsb13-05.html OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.25

sources: NVD: CVE-2013-0638 // JVNDB: JVNDB-2013-001480 // BID: 57926 // VULHUB: VHN-60640 // PACKETSTORM: 120268 // PACKETSTORM: 123225 // PACKETSTORM: 120239

AFFECTED PRODUCTS

vendor:adobemodel:flash playerscope:gteversion:11.2

Trust: 1.0

vendor:adobemodel:air sdkscope:ltversion:3.6.0.599

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.6.602.167

Trust: 1.0

vendor:adobemodel:flash playerscope:gteversion:11.6

Trust: 1.0

vendor:adobemodel:airscope:ltversion:3.6.0.597

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.2.202.270

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.6.602.168

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.1.115.47

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:10.3.183.63

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:10.3.183.61

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.1.111.43

Trust: 1.0

vendor:adobemodel:flash playerscope:gteversion:11.1

Trust: 1.0

vendor:adobemodel:flash playerscope:gteversion:10.3

Trust: 1.0

vendor:googlemodel:chromescope:ltversion:)

Trust: 0.8

vendor:adobemodel:airscope:eqversion:android)

Trust: 0.8

vendor:microsoftmodel:windowsscope:ltversion:)

Trust: 0.8

vendor:adobemodel:airscope:eqversion:macintosh

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:(android 2.x 3.x)

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:(android 4.x)

Trust: 0.8

vendor:adobemodel:air sdkscope:eqversion:android)

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:11.6.602.167

Trust: 0.8

vendor:microsoftmodel:internet explorerscope:eqversion:10 (adobe flash player 11.6.602.167

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:10.3.183.61

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:11.x (linux)

Trust: 0.8

vendor:adobemodel:air sdkscope:eqversion:macintosh

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:11.6.602.168

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:11.1.115.47

Trust: 0.8

vendor:adobemodel:airscope:ltversion:(windows

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:11.x (windows)

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:11.1.111.43

Trust: 0.8

vendor:microsoftmodel:windows serverscope:eqversion:2012 (adobe flash player 11.6.602.167

Trust: 0.8

vendor:microsoftmodel:internet explorerscope:ltversion:)

Trust: 0.8

vendor:adobemodel:airscope:eqversion:3.6.0.597

Trust: 0.8

vendor:adobemodel:air sdkscope:ltversion:3.6.0.59x (air for ios include ) (windows

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:11.2.202.270

Trust: 0.8

vendor:adobemodel:air sdkscope:ltversion:(air for ios include ) (windows

Trust: 0.8

vendor:adobemodel:air sdkscope:eqversion:3.6.0.599

Trust: 0.8

vendor:adobemodel:air sdkscope:eqversion:3.6.0.597

Trust: 0.8

vendor:microsoftmodel:windows 8scope:eqversion:for 64-bit systems (adobe flash player 11.6.602.167

Trust: 0.8

vendor:microsoftmodel:windows serverscope:ltversion:)

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:10.3.183.63

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:(macintosh linux)

Trust: 0.8

vendor:microsoftmodel:windows 8scope:eqversion:for 32-bit systems (adobe flash player 11.6.602.167

Trust: 0.8

vendor:microsoftmodel:windows 8scope:ltversion:)

Trust: 0.8

vendor:microsoftmodel:windowsscope:eqversion:rt (adobe flash player 11.6.602.167

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:(windows)

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:11.x (macintosh)

Trust: 0.8

vendor:googlemodel:chromescope:eqversion:(windows/linux/macintosh : adobe flash player 11.6.602.167

Trust: 0.8

vendor:adobemodel:flash player for androidscope:eqversion:11.1.111.5

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.112.61

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.111.16

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.111.19

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.112.60

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.111.8

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.111.9

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.111.7

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.102.59

Trust: 0.6

vendor:adobemodel:flash player for androidscope:eqversion:11.1.111.10

Trust: 0.6

vendor:susemodel:linux enterprise desktop sp2scope:eqversion:11

Trust: 0.3

vendor:susemodel:linux enterprise desktop sp4scope:eqversion:10

Trust: 0.3

vendor:susemodel:opensusescope:eqversion:12.1

Trust: 0.3

vendor:susemodel:opensusescope:eqversion:11.4

Trust: 0.3

vendor:redmodel:hat enterprise linux workstation supplementaryscope:eqversion:6

Trust: 0.3

vendor:redmodel:hat enterprise linux supplementary serverscope:eqversion:5

Trust: 0.3

vendor:redmodel:hat enterprise linux server supplementaryscope:eqversion:6

Trust: 0.3

vendor:redmodel:hat enterprise linux desktop supplementaryscope:eqversion:6

Trust: 0.3

vendor:redmodel:hat enterprise linux desktop supplementary clientscope:eqversion:5

Trust: 0.3

sources: BID: 57926 // JVNDB: JVNDB-2013-001480 // CNNVD: CNNVD-201302-166 // NVD: CVE-2013-0638

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-0638
value: HIGH

Trust: 1.0

NVD: CVE-2013-0638
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201302-166
value: CRITICAL

Trust: 0.6

VULHUB: VHN-60640
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2013-0638
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-60640
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-60640 // JVNDB: JVNDB-2013-001480 // CNNVD: CNNVD-201302-166 // NVD: CVE-2013-0638

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-60640 // JVNDB: JVNDB-2013-001480 // NVD: CVE-2013-0638

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201302-166

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201302-166

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-001480

PATCH

title:APSB13-05url:http://www.adobe.com/support/security/bulletins/apsb13-05.html

Trust: 0.8

title:APSB13-05 (cq02121817)url:http://helpx.adobe.com/jp/flash-player/kb/cq02121817.html

Trust: 0.8

title:Google Chromeurl:http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja

Trust: 0.8

title:Stable Channel Updateurl:http://googlechromereleases.blogspot.jp/2013/02/stable-channel-update_12.html

Trust: 0.8

title:Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (2755801)url:http://technet.microsoft.com/en-us/security/advisory/2755801

Trust: 0.8

title:openSUSE-SU-2013:0295url:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html

Trust: 0.8

title:SUSE-SU-2013:0296url:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html

Trust: 0.8

title:openSUSE-SU-2013:0298url:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html

Trust: 0.8

title:RHSA-2013:0254url:http://rhn.redhat.com/errata/RHSA-2013-0254.html

Trust: 0.8

title:Internet Explorer 10 上の Adobe Flash Player の脆弱性用の更新プログラム (2755801)url:http://technet.microsoft.com/ja-jp/security/advisory/2755801

Trust: 0.8

title:アドビ システムズ社 Adobe Flash Player の脆弱性に関するお知らせurl:http://www.fmworld.net/biz/common/adobe/20130214f.html

Trust: 0.8

title:install_flash_player_11_linux.i386url:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=45304

Trust: 0.6

title:install_flash_player_osxurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=45303

Trust: 0.6

title:install_flashplayer11x32_mssd_aihurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=45302

Trust: 0.6

sources: JVNDB: JVNDB-2013-001480 // CNNVD: CNNVD-201302-166

EXTERNAL IDS

db:NVDid:CVE-2013-0638

Trust: 3.0

db:USCERTid:TA13-043A

Trust: 1.9

db:JVNDBid:JVNDB-2013-001480

Trust: 0.8

db:CNNVDid:CNNVD-201302-166

Trust: 0.7

db:SECUNIAid:52166

Trust: 0.7

db:SECUNIAid:52164

Trust: 0.6

db:SECUNIAid:52197

Trust: 0.6

db:SECUNIAid:52203

Trust: 0.6

db:SECUNIAid:52163

Trust: 0.6

db:BIDid:57926

Trust: 0.4

db:VULHUBid:VHN-60640

Trust: 0.1

db:PACKETSTORMid:120268

Trust: 0.1

db:PACKETSTORMid:123225

Trust: 0.1

db:PACKETSTORMid:120239

Trust: 0.1

sources: VULHUB: VHN-60640 // BID: 57926 // JVNDB: JVNDB-2013-001480 // PACKETSTORM: 120268 // PACKETSTORM: 123225 // PACKETSTORM: 120239 // CNNVD: CNNVD-201302-166 // NVD: CVE-2013-0638

REFERENCES

url:http://www.us-cert.gov/cas/techalerts/ta13-043a.html

Trust: 1.9

url:http://www.adobe.com/support/security/bulletins/apsb13-05.html

Trust: 1.9

url:http://rhn.redhat.com/errata/rhsa-2013-0254.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html

Trust: 1.1

url:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html

Trust: 1.1

url:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html

Trust: 1.1

url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-0638

Trust: 0.8

url:http://www.ipa.go.jp/security/ciadr/vul/20130213-adobeflashplayer.html

Trust: 0.8

url:http://www.jpcert.or.jp/at/2013/at130010.txt

Trust: 0.8

url:http://jvn.jp/cert/jvnta13-043a

Trust: 0.8

url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-0638

Trust: 0.8

url:http://www.npa.go.jp/cyberpolice/topics/?seq=10777

Trust: 0.8

url:http://secunia.com/advisories/52163

Trust: 0.6

url:http://secunia.com/advisories/52164

Trust: 0.6

url:http://secunia.com/advisories/52166

Trust: 0.6

url:http://secunia.com/advisories/52197

Trust: 0.6

url:http://secunia.com/advisories/52203

Trust: 0.6

url:http://www.adobe.com/products/air/

Trust: 0.3

url:http://www.adobe.com/products/flash/

Trust: 0.3

url:http://www.gentoo.org/security/en/glsa/glsa-200903-23.xml

Trust: 0.3

url:https://www.redhat.com/security/data/cve/cve-2013-0647.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-0649.html

Trust: 0.1

url:https://access.redhat.com/security/updates/classification/#critical

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-0644.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1373.html

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1366

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0647

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1374.html

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0638

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1370

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1373

Trust: 0.1

url:https://access.redhat.com/security/team/contact/

Trust: 0.1

url:https://www.redhat.com/mailman/listinfo/rhsa-announce

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1367

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1368

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1372

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1368.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-0645.html

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0639

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-0642.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1365.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1372.html

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1374

Trust: 0.1

url:https://access.redhat.com/knowledge/articles/11258

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0645

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1366.html

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1365

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1369.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-0637.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-0638.html

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0637

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0649

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0644

Trust: 0.1

url:https://access.redhat.com/security/team/key/#package

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1367.html

Trust: 0.1

url:http://bugzilla.redhat.com/):

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-1370.html

Trust: 0.1

url:https://www.redhat.com/security/data/cve/cve-2013-0639.html

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-0642

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2013-1369

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0650

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1379

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5254

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5257

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5265

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3363

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3347

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5277

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5251

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5267

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5324

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0648

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5257

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5264

Trust: 0.1

url:http://creativecommons.org/licenses/by-sa/2.5

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0630

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3343

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5256

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5249

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5280

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5248

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5269

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5261

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5259

Trust: 0.1

url:http://security.gentoo.org/glsa/glsa-201309-06.xml

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1374

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5260

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3362

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5279

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5255

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5250

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0646

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0647

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1370

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5260

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5249

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5276

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5253

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5258

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1367

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1366

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1372

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5271

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5261

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0637

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5252

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3344

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5278

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5274

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0634

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5259

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5268

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5263

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5253

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5254

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0639

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0645

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3345

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5256

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1368

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0643

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5275

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5266

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2555

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5262

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1371

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0642

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1365

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5258

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5251

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1369

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2728

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1378

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0504

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5250

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0638

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5248

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5676

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5272

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5677

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0644

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1380

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0633

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3361

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5255

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5678

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1375

Trust: 0.1

url:http://security.gentoo.org/

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5270

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0649

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2012-5252

Trust: 0.1

url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1373

Trust: 0.1

url:https://bugs.gentoo.org.

Trust: 0.1

url:http://secunia.com/advisories/52166/

Trust: 0.1

url:http://secunia.com/vulnerability_intelligence/

Trust: 0.1

url:http://secunia.com/advisories/secunia_security_advisories/

Trust: 0.1

url:https://ca.secunia.com/?page=viewadvisory&vuln_id=52166

Trust: 0.1

url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

Trust: 0.1

url:http://secunia.com/vulnerability_scanning/personal/

Trust: 0.1

url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Trust: 0.1

url:http://secunia.com/advisories/52166/#comments

Trust: 0.1

url:http://secunia.com/blog/325/

Trust: 0.1

url:http://secunia.com/advisories/about_secunia_advisories/

Trust: 0.1

sources: VULHUB: VHN-60640 // BID: 57926 // JVNDB: JVNDB-2013-001480 // PACKETSTORM: 120268 // PACKETSTORM: 123225 // PACKETSTORM: 120239 // CNNVD: CNNVD-201302-166 // NVD: CVE-2013-0638

CREDITS

Damian Put through iDefense's Vulnerability Contributor Program

Trust: 0.3

sources: BID: 57926

SOURCES

db:VULHUBid:VHN-60640
db:BIDid:57926
db:JVNDBid:JVNDB-2013-001480
db:PACKETSTORMid:120268
db:PACKETSTORMid:123225
db:PACKETSTORMid:120239
db:CNNVDid:CNNVD-201302-166
db:NVDid:CVE-2013-0638

LAST UPDATE DATE

2024-11-21T21:05:59.927000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-60640date:2018-12-06T00:00:00
db:BIDid:57926date:2015-03-19T09:14:00
db:JVNDBid:JVNDB-2013-001480date:2013-03-28T00:00:00
db:CNNVDid:CNNVD-201302-166date:2013-02-18T00:00:00
db:NVDid:CVE-2013-0638date:2018-12-06T19:46:05.027

SOURCES RELEASE DATE

db:VULHUBid:VHN-60640date:2013-02-12T00:00:00
db:BIDid:57926date:2013-02-12T00:00:00
db:JVNDBid:JVNDB-2013-001480date:2013-02-14T00:00:00
db:PACKETSTORMid:120268date:2013-02-13T19:12:55
db:PACKETSTORMid:123225date:2013-09-14T15:19:13
db:PACKETSTORMid:120239date:2013-02-12T06:40:24
db:CNNVDid:CNNVD-201302-166date:2013-02-18T00:00:00
db:NVDid:CVE-2013-0638date:2013-02-12T20:55:04.323