Back to KEVs

CVE-2013-5331

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe...

Basic Information

CVE State
PUBLISHED
Reserved Date
August 20, 2013
Published Date
December 11, 2013
Last Updated
August 06, 2024
Vendor
Adobe
Product
Flash Player
Description
Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.
Tags
windows linux macos metasploit_scanner

CVSS Scores

CVSS v2.0

9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploit Status

Exploited in the Wild
Yes (2013-12-11 15:00:00 UTC) Source

References

http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html http://rhn.redhat.com/errata/RHSA-2013-1818.html http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html http://helpx.adobe.com/security/products/flash-player/apsb13-28.html

Known Exploited Vulnerability Information

Source Added Date
CVE 2013-12-11 15:00:00 UTC

Scanner Integrations

Scanner URL Date Detected
Metasploit https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_filters_type_confusion.rb 2025-04-29 11:01:29 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

adobe_flash_filters_type_confusion

Type: metasploit • Created: Unknown

Metasploit module for CVE-2013-5331

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel

  • Detected by Metasploit