CVE-2013-0639

CRITICAL 10.0CVE-2013-0639 · Published 12/02/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
air adobe	`< 3.6.0.597`	`3.6.0.597`
air sdk adobe	`< 3.6.0.599`	`3.6.0.599`
flash player adobe	`≥ 10.3, < 10.3.183.61≥ 10.3, < 10.3.183.63≥ 11.1, < 11.1.111.43≥ 11.1, < 11.1.115.47≥ 11.2, < 11.2.202.270≥ 11.6, < 11.6.602.167≥ 11.6, < 11.6.602.168`	`10.3.183.6110.3.183.6311.1.111.4311.1.115.4711.2.202.27011.6.602.16711.6.602.168`

Description

Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html · Mailing List
rhn.redhat.com/errata/RHSA-2013-0254.html · Third Party Advisory
adobe.com/support/security/bulletins/apsb13-05.html · Vendor Advisory
us-cert.gov/cas/techalerts/TA13-043A.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free