CVE-2013-1367

Description

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Risk Information

Base Score
8.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
4.189

Associated Vulnerability

VulnerabilityOS Platform
Upgrade Adobe Air 3.5.0.890 to latest versionWindows
Upgrade Adobe flash player 11.5.502.149 to latest versionWindows
Multiple vulnerabilities affected in Adobe AIR 3.5.0.890Windows
Multiple vulnerabilities affected in Adobe Flash Player Plugin 11.5.502.149Windows
Multiple vulnerabilities affected in Adobe Flash Player PPAPI 11.5.502.149Windows
Multiple Vulnerabilities are affected in Adobe AIR For Mac 3.6.0.596Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 3.6.0.598Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234