← Back to browse · API

CVE-2013-0643

Severity
HIGH
CVSS
8.8
EPSS
0.10533
Risk score
63.89
CISA KEV
Yes
PoC
No
Published
2013-02-27
Modified
2025-10-22
First seen
2026-08-07
Aliases
EUVD-2013-0654, GHSA-RV96-QGG3-4GV7
Products
Adobe:Flash Player, n/a:n/a n/a
Sources
cisa.gov CVE-2013-0643
euvd EUVD-2013-0654

Description

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

References