VulnerabilityModified

CVE-2013-0504

Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified…

HIGH 10.0EPSS 9.52%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (9.52%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 9.52% probability · 95th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: adobe/flash player
Source: psirt@us.ibm.com

References

http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0574.htmlThird Party Advisory
http://www.adobe.com/support/security/bulletins/apsb13-08.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/58184Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0574.htmlThird Party Advisory
http://www.adobe.com/support/security/bulletins/apsb13-08.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/58184Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.