SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2013-0630

Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x;…

HIGH 10.0EPSS 8.16%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (8.16%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
8.16% probability · 95th percentile
CISA KEV
Not listed
Weakness
CWE-119
Affected
adobe/flash player · adobe/flash player for android · adobe/adobe air · adobe/adobe air sdk
Source
psirt@adobe.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.