CVE-2013-0648
CISA 기관 조치 기한: 2024-10-08
Adobe Flash Player
Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.
KEV 필수 조치: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
타임라인
- NVD 공개
- CISA KEV 등재(실제 악용 확인) 공개 후 4,220일
- CISA 기관 조치 기한 경과
벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H