CVE-2013-0643 describes a critical privilege restriction bypass vulnerability in Adobe Flash Player versions prior to 10.3.183.67 and 11.x before 11.6.602.171 on Windows/macOS, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux. This flaw allows remote attackers to execute arbitrary code via specially crafted SWF content, impacting a wide range of operating systems including Adobe, Apple, Linux, Microsoft, and various distributions. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over a network with low attack complexity, requiring user interaction but leading to complete compromise of confidentiality, integrity, and availability. This CVE is listed in the KEV catalog, indicating active exploitation in the wild as early as February 2013, and has garnered significant community discussion and media coverage, despite no public exploit intelligence tools like Metasploit or Nuclei being identified.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.3.183.67CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
>= 11.0, < 11.6.602.171CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
>= 11.0, < 11.2.202.273CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | ||
5.9CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_eus:5.9:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.