Security News
긴급도 73/100 심각도 8.8 · 높음 악용확률 95.8% CISA KEV · 2024-09-17 CWE-269

CVE-2013-0643

CISA 기관 조치 기한: 2024-10-08

Adobe Flash Player

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.
KEV 필수 조치: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
타임라인
  1. NVD 공개
  2. CISA KEV 등재(실제 악용 확인) 공개 후 4,220일
  3. CISA 기관 조치 기한 경과

벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD 상세 ↗   GitHub Advisory ↗   벤더 권고문 ↗   참고 링크 ↗

← 취약점 목록