Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94…
Priority MEDIUM 50CWE-189Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-189 and the CVSS impact.
Summary
Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.
Why it matters now
EPSS 0.04752 91st percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 95
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | up to 11.7.700.224 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.0.1.152:*:*:*:*:*:*:* | 11.0.1.152 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.0.1.153:*:*:*:*:*:*:* | 11.0.1.153 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1:*:*:*:*:*:*:* | 11.1 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.102.55:*:*:*:*:*:*:* | 11.1.102.55 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.102.59:*:*:*:*:*:*:* | 11.1.102.59 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.102.62:*:*:*:*:*:*:* | 11.1.102.62 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.102.63:*:*:*:*:*:*:* | 11.1.102.63 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.111.8:*:*:*:*:*:*:* | 11.1.111.8 | Vulnerable | Adobe |
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 11.7.700.224 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.0.1.152:*:*:*:*:*:*:* Versions 11.0.1.152 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.0.1.153:*:*:*:*:*:*:* Versions 11.0.1.153 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.102.55:*:*:*:*:*:*:* Versions 11.1.102.55 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.102.59:*:*:*:*:*:*:* Versions 11.1.102.59 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.102.62:*:*:*:*:*:*:* Versions 11.1.102.62 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.102.63:*:*:*:*:*:*:* Versions 11.1.102.63 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.111.8:*:*:*:*:*:*:* Versions 11.1.111.8 Vulnerable ·Adobe
Show 85 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:adobe:flash_player:11.1.111.44:*:*:*:*:*:*:* | 11.1.111.44 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.111.50:*:*:*:*:*:*:* | 11.1.111.50 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.111.54:*:*:*:*:*:*:* | 11.1.111.54 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.115.7:*:*:*:*:*:*:* | 11.1.115.7 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.115.34:*:*:*:*:*:*:* | 11.1.115.34 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.115.48:*:*:*:*:*:*:* | 11.1.115.48 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.115.54:*:*:*:*:*:*:* | 11.1.115.54 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.1.115.58:*:*:*:*:*:*:* | 11.1.115.58 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.223:*:*:*:*:*:*:* | 11.2.202.223 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.228:*:*:*:*:*:*:* | 11.2.202.228 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.233:*:*:*:*:*:*:* | 11.2.202.233 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.235:*:*:*:*:*:*:* | 11.2.202.235 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.236:*:*:*:*:*:*:* | 11.2.202.236 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.238:*:*:*:*:*:*:* | 11.2.202.238 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.243:*:*:*:*:*:*:* | 11.2.202.243 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.251:*:*:*:*:*:*:* | 11.2.202.251 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.258:*:*:*:*:*:*:* | 11.2.202.258 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.261:*:*:*:*:*:*:* | 11.2.202.261 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.262:*:*:*:*:*:*:* | 11.2.202.262 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.270:*:*:*:*:*:*:* | 11.2.202.270 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.273:*:*:*:*:*:*:* | 11.2.202.273 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.275:*:*:*:*:*:*:* | 11.2.202.275 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.280:*:*:*:*:*:*:* | 11.2.202.280 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.2.202.285:*:*:*:*:*:*:* | 11.2.202.285 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.3.300.257:*:*:*:*:*:*:* | 11.3.300.257 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.3.300.262:*:*:*:*:*:*:* | 11.3.300.262 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.3.300.265:*:*:*:*:*:*:* | 11.3.300.265 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.3.300.268:*:*:*:*:*:*:* | 11.3.300.268 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.3.300.270:*:*:*:*:*:*:* | 11.3.300.270 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.3.300.271:*:*:*:*:*:*:* | 11.3.300.271 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.3.300.273:*:*:*:*:*:*:* | 11.3.300.273 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.4.402.265:*:*:*:*:*:*:* | 11.4.402.265 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.4.402.278:*:*:*:*:*:*:* | 11.4.402.278 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.4.402.287:*:*:*:*:*:*:* | 11.4.402.287 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.5.502.110:*:*:*:*:*:*:* | 11.5.502.110 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.5.502.135:*:*:*:*:*:*:* | 11.5.502.135 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.5.502.136:*:*:*:*:*:*:* | 11.5.502.136 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.5.502.146:*:*:*:*:*:*:* | 11.5.502.146 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.5.502.149:*:*:*:*:*:*:* | 11.5.502.149 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.6.602.167:*:*:*:*:*:*:* | 11.6.602.167 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.6.602.168:*:*:*:*:*:*:* | 11.6.602.168 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.6.602.171:*:*:*:*:*:*:* | 11.6.602.171 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.6.602.180:*:*:*:*:*:*:* | 11.6.602.180 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.7.700.169:*:*:*:*:*:*:* | 11.7.700.169 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.7.700.202:*:*:*:*:*:*:* | 11.7.700.202 | Vulnerable | Adobe |
| cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* | all versions | Running on | Microsoft |
| cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | up to 11.7.700.225 | Vulnerable | Adobe |
| cpe:2.3:a:adobe:flash_player:11.7.700.224:*:*:*:*:*:*:* | 11.7.700.224 | Vulnerable | Adobe |
| cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | all versions | Running on | Apple |
| cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | up to 11.2.202.291 | Vulnerable | Adobe |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | all versions | Running on | Linux |
| cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | up to 11.1.115.59 | Vulnerable | Adobe |
| cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:* | 2.0 | Running on | |
| cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:* | 2.0.1 | Running on | |
| cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:* | 2.1 | Running on | |
| cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:* | 2.2 | Running on | |
| cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:* | 2.2 rev1 | Running on | |
| cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Running on | |
| cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Running on | |
| cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Running on | |
| cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:* | 2.3 | Running on | |
| cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:* | 2.3 rev1 | Running on | |
| cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:* | 2.3.1 | Running on | |
| cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:* | 2.3.2 | Running on | |
| cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:* | 2.3.3 | Running on | |
| cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:* | 2.3.4 | Running on | |
| cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:* | 2.3.5 | Running on | |
| cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:* | 2.3.6 | Running on | |
| cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:* | 2.3.7 | Running on | |
| cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:* | 3.0 | Running on | |
| cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:* | 3.1 | Running on | |
| cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:* | 3.2 | Running on | |
| cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Running on | |
| cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Running on | |
| cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:* | 3.2.4 | Running on | |
| cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:* | 3.2.6 | Running on | |
| cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | up to 11.1.115.63 | Vulnerable | Adobe |
| cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* | 4.0 | Running on | |
| cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Running on | |
| cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Running on | |
| cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Running on | |
| cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* | 4.0.4 | Running on | |
| cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* | 4.1 | Running on | |
| cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* | 4.1.2 | Running on | |
| cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:* | 4.2 | Running on |
- cpe:2.3:a:adobe:flash_player:11.1.111.44:*:*:*:*:*:*:* Versions 11.1.111.44 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.111.50:*:*:*:*:*:*:* Versions 11.1.111.50 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.111.54:*:*:*:*:*:*:* Versions 11.1.111.54 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.115.7:*:*:*:*:*:*:* Versions 11.1.115.7 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.115.34:*:*:*:*:*:*:* Versions 11.1.115.34 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.115.48:*:*:*:*:*:*:* Versions 11.1.115.48 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.115.54:*:*:*:*:*:*:* Versions 11.1.115.54 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.1.115.58:*:*:*:*:*:*:* Versions 11.1.115.58 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.223:*:*:*:*:*:*:* Versions 11.2.202.223 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.228:*:*:*:*:*:*:* Versions 11.2.202.228 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.233:*:*:*:*:*:*:* Versions 11.2.202.233 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.235:*:*:*:*:*:*:* Versions 11.2.202.235 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.236:*:*:*:*:*:*:* Versions 11.2.202.236 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.238:*:*:*:*:*:*:* Versions 11.2.202.238 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.243:*:*:*:*:*:*:* Versions 11.2.202.243 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.251:*:*:*:*:*:*:* Versions 11.2.202.251 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.258:*:*:*:*:*:*:* Versions 11.2.202.258 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.261:*:*:*:*:*:*:* Versions 11.2.202.261 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.262:*:*:*:*:*:*:* Versions 11.2.202.262 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.270:*:*:*:*:*:*:* Versions 11.2.202.270 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.273:*:*:*:*:*:*:* Versions 11.2.202.273 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.275:*:*:*:*:*:*:* Versions 11.2.202.275 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.280:*:*:*:*:*:*:* Versions 11.2.202.280 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.2.202.285:*:*:*:*:*:*:* Versions 11.2.202.285 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.3.300.257:*:*:*:*:*:*:* Versions 11.3.300.257 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.3.300.262:*:*:*:*:*:*:* Versions 11.3.300.262 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.3.300.265:*:*:*:*:*:*:* Versions 11.3.300.265 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.3.300.268:*:*:*:*:*:*:* Versions 11.3.300.268 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.3.300.270:*:*:*:*:*:*:* Versions 11.3.300.270 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.3.300.271:*:*:*:*:*:*:* Versions 11.3.300.271 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.3.300.273:*:*:*:*:*:*:* Versions 11.3.300.273 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.4.402.265:*:*:*:*:*:*:* Versions 11.4.402.265 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.4.402.278:*:*:*:*:*:*:* Versions 11.4.402.278 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.4.402.287:*:*:*:*:*:*:* Versions 11.4.402.287 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.5.502.110:*:*:*:*:*:*:* Versions 11.5.502.110 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.5.502.135:*:*:*:*:*:*:* Versions 11.5.502.135 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.5.502.136:*:*:*:*:*:*:* Versions 11.5.502.136 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.5.502.146:*:*:*:*:*:*:* Versions 11.5.502.146 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.5.502.149:*:*:*:*:*:*:* Versions 11.5.502.149 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.6.602.167:*:*:*:*:*:*:* Versions 11.6.602.167 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.6.602.168:*:*:*:*:*:*:* Versions 11.6.602.168 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.6.602.171:*:*:*:*:*:*:* Versions 11.6.602.171 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.6.602.180:*:*:*:*:*:*:* Versions 11.6.602.180 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.7.700.169:*:*:*:*:*:*:* Versions 11.7.700.169 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.7.700.202:*:*:*:*:*:*:* Versions 11.7.700.202 Vulnerable ·Adobe
- cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 11.7.700.225 Vulnerable ·Adobe
- cpe:2.3:a:adobe:flash_player:11.7.700.224:*:*:*:*:*:*:* Versions 11.7.700.224 Vulnerable ·Adobe
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions all versions Running on ·Apple
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 11.2.202.291 Vulnerable ·Adobe
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions all versions Running on ·Linux
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 11.1.115.59 Vulnerable ·Adobe
- cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·Google
- cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Running on ·Google
- cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:* Versions 2.1 Running on ·Google
- cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:* Versions 2.2 Running on ·Google
- cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:* Versions 2.2 rev1 Running on ·Google
- cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Running on ·Google
- cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Running on ·Google
- cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Running on ·Google
- cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:* Versions 2.3 Running on ·Google
- cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:* Versions 2.3 rev1 Running on ·Google
- cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Running on ·Google
- cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Running on ·Google
- cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Running on ·Google
- cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Running on ·Google
- cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:* Versions 2.3.5 Running on ·Google
- cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:* Versions 2.3.6 Running on ·Google
- cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:* Versions 2.3.7 Running on ·Google
- cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·Google
- cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:* Versions 3.1 Running on ·Google
- cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:* Versions 3.2 Running on ·Google
- cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Running on ·Google
- cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Running on ·Google
- cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Running on ·Google
- cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Running on ·Google
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 11.1.115.63 Vulnerable ·Adobe
- cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·Google
- cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Running on ·Google
- cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Running on ·Google
- cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Running on ·Google
- cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Running on ·Google
- cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* Versions 4.1 Running on ·Google
- cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Running on ·Google
- cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:* Versions 4.2 Running on ·Google
Remediation
Red Hat 1 advisory
- RHSA-2013:1035 Released 2013-07-10 · Red Hat rating Criticalflash-plugin security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-11.2.202.297-1.el6
- Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-11.2.202.297-1.el5.i386
- Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-11.2.202.297-1.el6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-11.2.202.297-1.el6
Vendor assessments
Red Hat
Red Hat rating: Critical. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2013:1035 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2013:1035 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2013:1035 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2013:1035 |
Timeline
- 2026-10-02 Threatist record created from CVE-2013-3347
- 2026-10-03 Alias added: GHSA-gg7j-4m6j-hpg3
References
More Adobe Flash Player vulnerabilities
- TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
- TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
- TI-2016-00925 Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of… KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2013-3347 · CVE Program
- CVE-2013-3347 · NVD
- FIRST EPSS
- GHSA-gg7j-4m6j-hpg3 · GitHub Advisory Database · CC BY 4.0
- CVE-2013-3347 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences