Sign-up

ID

VAR-201305-0292


CVE

CVE-2013-2728


TITLE

Adobe Flash Player and Adobe AIR Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2013-002690

DESCRIPTION

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335. This vulnerability CVE-2013-3324 , CVE-2013-3325 , CVE-2013-3326 , CVE-2013-3327 , CVE-2013-3328 , CVE-2013-3329 , CVE-2013-3330 , CVE-2013-3331 , CVE-2013-3332 , CVE-2013-3333 , CVE-2013-3334 ,and CVE-2013-3335 Is a different vulnerability.An attacker could execute arbitrary code or cause a denial of service ( Memory corruption ) There is a possibility of being put into a state. Attackers can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions. Adobe AIR is a cross-operating system runtime environment that can be used to build and configure cross-platform desktop RIA (Rich Internet Applications) applications. Vulnerabilities in versions prior to 0.1860; Adobe AIR SDK & Compiler prior to 3.7.0.1860. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2013:0825-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2013-0825.html Issue date: 2013-05-15 CVE Names: CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 CVE-2013-3335 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities are detailed in the Adobe Security bulletin APSB13-14, listed in the References section. Specially-crafted SWF content could cause flash-plugin to crash or, potentially, execute arbitrary code when a victim loads a page containing the malicious SWF content. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 962895 - flash-plugin: multiple code execution flaws (APSB13-14) 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.285-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.285-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.285-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.285-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.285-1.el6.i686.rpm x86_64: flash-plugin-11.2.202.285-1.el6.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.285-1.el6.i686.rpm x86_64: flash-plugin-11.2.202.285-1.el6.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.285-1.el6.i686.rpm x86_64: flash-plugin-11.2.202.285-1.el6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.redhat.com/security/data/cve/CVE-2013-2728.html https://www.redhat.com/security/data/cve/CVE-2013-3324.html https://www.redhat.com/security/data/cve/CVE-2013-3325.html https://www.redhat.com/security/data/cve/CVE-2013-3326.html https://www.redhat.com/security/data/cve/CVE-2013-3327.html https://www.redhat.com/security/data/cve/CVE-2013-3328.html https://www.redhat.com/security/data/cve/CVE-2013-3329.html https://www.redhat.com/security/data/cve/CVE-2013-3330.html https://www.redhat.com/security/data/cve/CVE-2013-3331.html https://www.redhat.com/security/data/cve/CVE-2013-3332.html https://www.redhat.com/security/data/cve/CVE-2013-3333.html https://www.redhat.com/security/data/cve/CVE-2013-3334.html https://www.redhat.com/security/data/cve/CVE-2013-3335.html https://access.redhat.com/security/updates/classification/#critical http://www.adobe.com/support/security/bulletins/apsb13-14.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFRk0+VXlSAg2UNWIIRAkH8AJ4qnX1dCu9PQZVRQTc+jd80f3eHuQCgpBlA pCXFdmTpNYaaRsAS+FVd7h4= =8nby -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker could entice a user to open specially crafted SWF content, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to bypass access restrictions. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.310" References ========== [ 1 ] CVE-2012-5248 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5248 [ 2 ] CVE-2012-5248 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5248 [ 3 ] CVE-2012-5249 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5249 [ 4 ] CVE-2012-5249 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5249 [ 5 ] CVE-2012-5250 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5250 [ 6 ] CVE-2012-5250 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5250 [ 7 ] CVE-2012-5251 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5251 [ 8 ] CVE-2012-5251 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5251 [ 9 ] CVE-2012-5252 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5252 [ 10 ] CVE-2012-5252 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5252 [ 11 ] CVE-2012-5253 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5253 [ 12 ] CVE-2012-5253 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5253 [ 13 ] CVE-2012-5254 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5254 [ 14 ] CVE-2012-5254 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5254 [ 15 ] CVE-2012-5255 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5255 [ 16 ] CVE-2012-5255 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5255 [ 17 ] CVE-2012-5256 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5256 [ 18 ] CVE-2012-5256 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5256 [ 19 ] CVE-2012-5257 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5257 [ 20 ] CVE-2012-5257 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5257 [ 21 ] CVE-2012-5258 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5258 [ 22 ] CVE-2012-5258 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5258 [ 23 ] CVE-2012-5259 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5259 [ 24 ] CVE-2012-5259 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5259 [ 25 ] CVE-2012-5260 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5260 [ 26 ] CVE-2012-5260 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5260 [ 27 ] CVE-2012-5261 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5261 [ 28 ] CVE-2012-5261 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5261 [ 29 ] CVE-2012-5262 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5262 [ 30 ] CVE-2012-5262 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5262 [ 31 ] CVE-2012-5263 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5263 [ 32 ] CVE-2012-5263 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5263 [ 33 ] CVE-2012-5264 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5264 [ 34 ] CVE-2012-5264 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5264 [ 35 ] CVE-2012-5265 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5265 [ 36 ] CVE-2012-5265 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5265 [ 37 ] CVE-2012-5266 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5266 [ 38 ] CVE-2012-5266 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5266 [ 39 ] CVE-2012-5267 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5267 [ 40 ] CVE-2012-5267 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5267 [ 41 ] CVE-2012-5268 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5268 [ 42 ] CVE-2012-5268 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5268 [ 43 ] CVE-2012-5269 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5269 [ 44 ] CVE-2012-5269 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5269 [ 45 ] CVE-2012-5270 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5270 [ 46 ] CVE-2012-5270 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5270 [ 47 ] CVE-2012-5271 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5271 [ 48 ] CVE-2012-5271 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5271 [ 49 ] CVE-2012-5272 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5272 [ 50 ] CVE-2012-5272 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5272 [ 51 ] CVE-2012-5274 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5274 [ 52 ] CVE-2012-5275 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5275 [ 53 ] CVE-2012-5276 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5276 [ 54 ] CVE-2012-5277 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5277 [ 55 ] CVE-2012-5278 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5278 [ 56 ] CVE-2012-5279 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5279 [ 57 ] CVE-2012-5280 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5280 [ 58 ] CVE-2012-5676 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5676 [ 59 ] CVE-2012-5677 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5677 [ 60 ] CVE-2012-5678 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5678 [ 61 ] CVE-2013-0504 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0504 [ 62 ] CVE-2013-0630 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0630 [ 63 ] CVE-2013-0633 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0633 [ 64 ] CVE-2013-0634 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0634 [ 65 ] CVE-2013-0637 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0637 [ 66 ] CVE-2013-0638 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0638 [ 67 ] CVE-2013-0639 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0639 [ 68 ] CVE-2013-0642 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0642 [ 69 ] CVE-2013-0643 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0643 [ 70 ] CVE-2013-0644 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0644 [ 71 ] CVE-2013-0645 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0645 [ 72 ] CVE-2013-0646 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0646 [ 73 ] CVE-2013-0647 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0647 [ 74 ] CVE-2013-0648 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0648 [ 75 ] CVE-2013-0649 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0649 [ 76 ] CVE-2013-0650 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0650 [ 77 ] CVE-2013-1365 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1365 [ 78 ] CVE-2013-1366 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1366 [ 79 ] CVE-2013-1367 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1367 [ 80 ] CVE-2013-1368 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1368 [ 81 ] CVE-2013-1369 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1369 [ 82 ] CVE-2013-1370 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1370 [ 83 ] CVE-2013-1371 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1371 [ 84 ] CVE-2013-1372 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1372 [ 85 ] CVE-2013-1373 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1373 [ 86 ] CVE-2013-1374 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1374 [ 87 ] CVE-2013-1375 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1375 [ 88 ] CVE-2013-1378 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1378 [ 89 ] CVE-2013-1379 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1379 [ 90 ] CVE-2013-1380 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1380 [ 91 ] CVE-2013-2555 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2555 [ 92 ] CVE-2013-2728 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2728 [ 93 ] CVE-2013-3343 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3343 [ 94 ] CVE-2013-3344 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3344 [ 95 ] CVE-2013-3345 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3345 [ 96 ] CVE-2013-3347 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3347 [ 97 ] CVE-2013-3361 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3361 [ 98 ] CVE-2013-3362 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3362 [ 99 ] CVE-2013-3363 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3363 [ 100 ] CVE-2013-5324 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5324 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-201309-06.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2013 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

Trust: 2.16

sources: NVD: CVE-2013-2728 // JVNDB: JVNDB-2013-002690 // BID: 59889 // VULHUB: VHN-62730 // PACKETSTORM: 121646 // PACKETSTORM: 123225

AFFECTED PRODUCTS

vendor:redhatmodel:enterprise linux workstationscope:eqversion:6.0

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.7.700.202

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.1.111.54

Trust: 1.0

vendor:redhatmodel:enterprise linux eusscope:eqversion:5.9

Trust: 1.0

vendor:redhatmodel:enterprise linux desktopscope:eqversion:6.0

Trust: 1.0

vendor:redhatmodel:enterprise linux server eusscope:eqversion:6.4

Trust: 1.0

vendor:opensusemodel:opensusescope:eqversion:12.3

Trust: 1.0

vendor:redhatmodel:enterprise linux eusscope:eqversion:6.4

Trust: 1.0

vendor:opensusemodel:opensusescope:eqversion:11.4

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:10.3.183.86

Trust: 1.0

vendor:opensusemodel:opensusescope:eqversion:12.2

Trust: 1.0

vendor:adobemodel:air sdkscope:ltversion:3.7.0.1860

Trust: 1.0

vendor:adobemodel:flash playerscope:gteversion:11.0

Trust: 1.0

vendor:susemodel:linux enterprise desktopscope:eqversion:10

Trust: 1.0

vendor:redhatmodel:enterprise linux serverscope:eqversion:6.0

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.1.115.58

Trust: 1.0

vendor:adobemodel:airscope:ltversion:3.7.0.1860

Trust: 1.0

vendor:susemodel:linux enterprise desktopscope:eqversion:11

Trust: 1.0

vendor:redhatmodel:enterprise linux server eusscope:eqversion:5.9

Trust: 1.0

vendor:adobemodel:flash playerscope:ltversion:11.2.202.285

Trust: 1.0

vendor:googlemodel:chromescope:ltversion:26 installed on adobe flash player 11.7.700.202 (windows

Trust: 0.8

vendor:googlemodel:chromescope:eqversion:linux

Trust: 0.8

vendor:googlemodel:chromescope:eqversion:and macintosh)

Trust: 0.8

vendor:adobemodel:airscope:ltversion:3.7.0.1860 (windows

Trust: 0.8

vendor:adobemodel:airscope:eqversion:macintosh

Trust: 0.8

vendor:adobemodel:airscope:eqversion:and android)

Trust: 0.8

vendor:adobemodel:air sdkscope:ltversion:(sdk & compiler) 3.7.0.1860

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:11.1.111.54 (android 2.x and 3.x)

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:11.1.115.58 (android 4.x)

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:11.2.202.285 (linux)

Trust: 0.8

vendor:adobemodel:flash playerscope:ltversion:11.7.700.202 (windows and macintosh)

Trust: 0.8

vendor:microsoftmodel:internet explorerscope:ltversion:10 (adobe flash player 11.7.700.202 )

Trust: 0.8

vendor:microsoftmodel:windowsscope:ltversion:rt (adobe flash player 11.7.700.202 )

Trust: 0.8

vendor:microsoftmodel:windows 8scope:ltversion:for 32-bit systems (adobe flash player 11.7.700.202 )

Trust: 0.8

vendor:microsoftmodel:windows 8scope:ltversion:for 64-bit systems (adobe flash player 11.7.700.202 )

Trust: 0.8

vendor:microsoftmodel:windows serverscope:ltversion:2012 (adobe flash player 11.7.700.202 )

Trust: 0.8

vendor:adobemodel:flash playerscope:eqversion:11.4.402.265

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.1.102.62

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.2.202.251

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.5.502.110

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.2.202.236

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.1.102.63

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.3.300.257

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.1

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.2.202.228

Trust: 0.6

vendor:adobemodel:flash playerscope:eqversion:11.2.202.258

Trust: 0.6

vendor:susemodel:linux enterprise desktop sp2scope:eqversion:11

Trust: 0.3

vendor:susemodel:linux enterprise desktop sp4scope:eqversion:10

Trust: 0.3

vendor:susemodel:opensusescope:eqversion:11.4

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:9.0.600.1

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:8.0.555.1

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:8.0.555.0

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:18.0.1050.0

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:15.0.900.1

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:13.0.800.0

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:13.0

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:11.0.700.2

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:11.0.700.1

Trust: 0.3

vendor:srwaremodel:ironscope:eqversion:11.0.700.0

Trust: 0.3

vendor:redmodel:hat enterprise linux workstation supplementaryscope:eqversion:6

Trust: 0.3

vendor:redmodel:hat enterprise linux supplementary serverscope:eqversion:5

Trust: 0.3

vendor:redmodel:hat enterprise linux server supplementaryscope:eqversion:6

Trust: 0.3

vendor:redmodel:hat enterprise linux desktop supplementaryscope:eqversion:6

Trust: 0.3

vendor:redmodel:hat enterprise linux desktop supplementary clientscope:eqversion:5

Trust: 0.3

sources: BID: 59889 // JVNDB: JVNDB-2013-002690 // CNNVD: CNNVD-201305-340 // NVD: CVE-2013-2728

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-2728
value: HIGH

Trust: 1.0

NVD: CVE-2013-2728
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201305-340
value: CRITICAL

Trust: 0.6

VULHUB: VHN-62730
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2013-2728
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-62730
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-62730 // JVNDB: JVNDB-2013-002690 // CNNVD: CNNVD-201305-340 // NVD: CVE-2013-2728

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-62730 // JVNDB: JVNDB-2013-002690 // NVD: CVE-2013-2728

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201305-340

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201305-340

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-002690

PATCH
title:APSB13-14url:http://www.adobe.com/support/security/bulletins/apsb13-14.html
Trust: 0.8
title:APSB13-14 (cq05140122)url:http://helpx.adobe.com/jp/flash-player/kb/cq05140122.html
Trust: 0.8
title:Google Chromeurl:http://www.google.co.jp/chrome/intl/ja/landing_ff_yt.html?hl=ja&hl=ja
Trust: 0.8
title:Flash Player Updateurl:http://googlechromereleases.blogspot.jp/2013/05/flash-player-update.html
Trust: 0.8
title:Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (2755801)url:http://technet.microsoft.com/en-us/security/advisory/2755801
Trust: 0.8
title:SUSE-SU-2013:0798url:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00003.html
Trust: 0.8
title:openSUSE-SU-2013:0892url:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00003.html
Trust: 0.8
title:openSUSE-SU-2013:0954url:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00010.html
Trust: 0.8
title:RHSA-2013:0825url:http://rhn.redhat.com/errata/RHSA-2013-0825.html
Trust: 0.8
title:Internet Explorer 10 上の Adobe Flash Player の脆弱性用の更新プログラム (2755801)url:http://technet.microsoft.com/ja-jp/security/advisory/2755801
Trust: 0.8
title:アドビ システムズ社 Adobe Flash Player の脆弱性に関するお知らせurl:http://www.fmworld.net/biz/common/adobe/20130516f.html
Trust: 0.8
title:install_flash_player_11_linux.i386url:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=45965
Trust: 0.6
title:install_flash_player_osxurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=45964
Trust: 0.6
title:install_flashplayer11x32ax_mssd_aihurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=45963
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2013-002690 // 
            
            
            
            CNNVD: CNNVD-201305-340

EXTERNAL IDS
db:NVDid:CVE-2013-2728
Trust: 3.0
db:SECUNIAid:53442
Trust: 1.7
db:JVNDBid:JVNDB-2013-002690
Trust: 0.8
db:CNNVDid:CNNVD-201305-340
Trust: 0.6
db:BIDid:59889
Trust: 0.4
db:PACKETSTORMid:121646
Trust: 0.2
db:VULHUBid:VHN-62730
Trust: 0.1
db:PACKETSTORMid:123225
Trust: 0.1
sources:
            
            
            VULHUB: VHN-62730 // 
            
            
            
            BID: 59889 // 
            
            
            
            JVNDB: JVNDB-2013-002690 // 
            
            
            
            PACKETSTORM: 121646 // 
            
            
            
            PACKETSTORM: 123225 // 
            
            
            
            CNNVD: CNNVD-201305-340 // 
            
            
            
            NVD: CVE-2013-2728

REFERENCES
url:http://www.adobe.com/support/security/bulletins/apsb13-14.html
Trust: 2.1
url:http://rhn.redhat.com/errata/rhsa-2013-0825.html
Trust: 1.8
url:https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a16932
Trust: 1.7
url:http://secunia.com/advisories/53442
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00003.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00003.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00010.html
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2728
Trust: 0.8
url:http://www.ipa.go.jp/security/ciadr/vul/20130515-adobeflashplayer.html
Trust: 0.8
url:https://www.jpcert.or.jp/at/2013/at130025.txt
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-2728
Trust: 0.8
url:http://www.npa.go.jp/cyberpolice/topics/?seq=11478
Trust: 0.8
url:http://www.adobe.com/products/air/
Trust: 0.3
url:http://www.adobe.com/products/flash/
Trust: 0.3
url:http://www.srware.net/forum/viewtopic.php?f=18&t=6987
Trust: 0.3
url:http://www.gentoo.org/security/en/glsa/glsa-200903-23.xml
Trust: 0.3
url:http://btsc.webapps.blackberry.com/btsc/viewdocument.do?nocount=true&externalid=kb35925&sliceid=1&cmd=&forward=nonthreadedkc&command=show&kcid=kb35925&vieweddocslisthelper=com.kanisa.apps.common.basev
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2013-3333
Trust: 0.1
url:https://access.redhat.com/security/updates/classification/#critical
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3329
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3324
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3325.html
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3335.html
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3331.html
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3334
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-2728
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3327.html
Trust: 0.1
url:https://access.redhat.com/security/team/contact/
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3332
Trust: 0.1
url:https://www.redhat.com/mailman/listinfo/rhsa-announce
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3332.html
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3324.html
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3335
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3334.html
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3326
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3330.html
Trust: 0.1
url:https://access.redhat.com/knowledge/articles/11258
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3326.html
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3331
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3328.html
Trust: 0.1
url:https://access.redhat.com/security/team/key/#package
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3333.html
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-3329.html
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3327
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3328
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3330
Trust: 0.1
url:http://bugzilla.redhat.com/):
Trust: 0.1
url:https://www.redhat.com/security/data/cve/cve-2013-2728.html
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2013-3325
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0650
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1379
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5254
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5257
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5265
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3363
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3347
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5277
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5251
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5267
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-5324
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0648
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5257
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5264
Trust: 0.1
url:http://creativecommons.org/licenses/by-sa/2.5
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0630
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3343
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5256
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5249
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5280
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5248
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5269
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5261
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5259
Trust: 0.1
url:http://security.gentoo.org/glsa/glsa-201309-06.xml
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1374
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5260
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3362
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5279
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5255
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5250
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0646
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0647
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1370
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5260
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5249
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5276
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5253
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5258
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1367
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1366
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1372
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5271
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5261
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0637
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5252
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3344
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5278
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5274
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0634
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5259
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5268
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5263
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5253
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5254
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0639
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0645
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3345
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5256
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1368
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0643
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5275
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5266
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2555
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5262
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1371
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0642
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1365
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5258
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5251
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1369
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-2728
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1378
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0504
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5250
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0638
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5248
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5676
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5272
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5677
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0644
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1380
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0633
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-3361
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5255
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5678
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1375
Trust: 0.1
url:http://security.gentoo.org/
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5270
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0649
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2012-5252
Trust: 0.1
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1373
Trust: 0.1
url:https://bugs.gentoo.org.
Trust: 0.1
sources:
            
            
            VULHUB: VHN-62730 // 
            
            
            
            BID: 59889 // 
            
            
            
            JVNDB: JVNDB-2013-002690 // 
            
            
            
            PACKETSTORM: 121646 // 
            
            
            
            PACKETSTORM: 123225 // 
            
            
            
            CNNVD: CNNVD-201305-340 // 
            
            
            
            NVD: CVE-2013-2728

CREDITS
Mateusz Jurczyk and Ben Hawkes of the Google Security Team
Trust: 0.3
sources:
            
            
            BID: 59889

SOURCES
db:VULHUBid:VHN-62730
db:BIDid:59889
db:JVNDBid:JVNDB-2013-002690
db:PACKETSTORMid:121646
db:PACKETSTORMid:123225
db:CNNVDid:CNNVD-201305-340
db:NVDid:CVE-2013-2728

LAST UPDATE DATE
2024-08-14T12:23:32.496000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-62730date:2020-08-25T00:00:00
db:BIDid:59889date:2015-03-19T08:50:00
db:JVNDBid:JVNDB-2013-002690date:2013-12-19T00:00:00
db:CNNVDid:CNNVD-201305-340date:2020-08-26T00:00:00
db:NVDid:CVE-2013-2728date:2020-08-25T13:10:17.427

SOURCES RELEASE DATE
db:VULHUBid:VHN-62730date:2013-05-16T00:00:00
db:BIDid:59889date:2013-05-14T00:00:00
db:JVNDBid:JVNDB-2013-002690date:2013-05-17T00:00:00
db:PACKETSTORMid:121646date:2013-05-15T15:55:00
db:PACKETSTORMid:123225date:2013-09-14T15:19:13
db:CNNVDid:CNNVD-201305-340date:2013-05-17T00:00:00
db:NVDid:CVE-2013-2728date:2013-05-16T11:45:31.240