CVE-2013-0648

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.

CISA Known Exploited Vulnerability

Vendor / Product Adobe — Flash Player

Date Added 2024-09-17

Remediation Due 2024-10-08

https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2013-0648

Affected Software (14)

Vendor	Product	Version
adobe	flash_player	< 10.3.183.67
adobe	flash_player	11.0 – 11.6.602.171
adobe	flash_player	11.0 – 11.2.202.273
opensuse	opensuse	11.4
opensuse	opensuse	12.1
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_eus	5.9
redhat	enterprise_linux_eus	6.4
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server_aus	5.9
redhat	enterprise_linux_server_aus	6.4
redhat	enterprise_linux_workstation	6.0
suse	linux_enterprise_desktop	10
suse	linux_enterprise_desktop	11