CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Adobe Flash Player ExternalInterface ActionScript Remote Code Execution Vulnerability (CVE-2013-0648, CISA KEV)
[Affected Scope] Adobe Flash Player versions before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 11.2.202.273 on Linux
[Impact] Remote attackers can execute arbitrary code and gain full control of the target system by enticing users to load a specially crafted SWF file
[Mitigation] Immediately uninstall Adobe Flash Player from all endpoints and servers, or disable Flash execution within web browsers and document viewers
Adobe Flash Player and Reader/Acrobat Remote Code Execution Vulnerability (CVE-2010-1297)
[Affected Scope] Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader/Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X
[Impact] Successful exploitation allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content
[Mitigation] Immediately upgrade all affected Adobe products to the latest patched versions, or disable/rename the vulnerable authplay.dll component