CVE-2013-5332

Severity CVSS v4.0:
Pending analysis
Type:
CWE-94 Code Injection
Publication date:
11/12/2013
Last modified:
11/04/2025

Description

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* 11.0 (including) 11.7.700.257 (excluding)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* 11.8 (including) 11.8.800.175 (excluding)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* 11.9 (including) 11.9.900.700 (excluding)
cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* 11.0 (including) 11.2.202.332 (excluding)
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* 3.9.0.1380 (excluding)
cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:* 3.9.0.1380 (excluding)