CVE-2013-3347

Description

Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

9.99

Associated Vulnerability

Vulnerability	OS Platform
Upgrade Adobe flash player 11.7.700.225 to latest version	Windows
Vulnerabilities CVE-2013-3344,CVE-2013-3345,CVE-2013-3347 are affected in Adobe Flash Player Plugin 11.7.700.225	Windows
Vulnerabilities CVE-2013-3344,CVE-2013-3345,CVE-2013-3347 are affected in Adobe Flash Player PPAPI 11.7.700.225	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234