CVE-2013-5331

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before…

published December 11, 2013

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
72%
Percentile
99.4
In the wild
Unconfirmed
What it is

🚨 A crafty piece of .swf content could allow remote attackers to execute arbitrary code on your system! This vulnerability lurks in Adobe Flash Player and Adobe AIR like a mischievous magician pulling tricks out of thin air. 🔥 Think of it like a sneaky magician who can swap out a normal deck of cards for a rigged one — if they perform just right, they can pull a fast one on you and make you believe you've drawn a winning hand when you haven't! An attacker could exploit this vulnerability to take control of your system, potentially leading to data theft, system compromise, or worse. Imagine them waltzing into your digital space and executing their whims — absolutely devastating!

Put simply

Think of it like a sneaky magician who can swap out a normal deck of cards for a rigged one — if they perform just right, they can pull a fast one on you and make you believe you've drawn a winning hand when you haven't! This vulnerability arises from a 'type confusion' in Adobe Flash Player and Adobe AIR, allowing attackers to craft malicious .swf files that can be executed without proper checks, thereby running arbitrary code on the victim's machine.

What to do

An attacker could exploit this vulnerability to take control of your system, potentially leading to data theft, system compromise, or worse. Imagine them waltzing into your digital space and executing their whims — absolutely devastating! Update Adobe Flash Player to version 11.7.700.257 or later, and make sure your Adobe AIR and its SDK are patched to version 3.9.0.1380 or higher. Regularly check for updates to mitigate risks from such vulnerabilities. You've got this! Stay proactive about updates and you'll keep your digital fortress safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.72495 · 99.4th percentile
Published
2013-12-11T15:00Z
EPSS history
Timeline
  • 11 DEC 15:00Z
    Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before…
    cvelistv5