CVE-2013-0643β€”Adobe Flash Player Incorrect Default Permissions Vulnerability

PUBLISHEDvulnerability record
2024-09-17 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2013-0643
Project:
Adobe
Product:
Flash Player
Date Added:
2024-09-17
Due Date:
2024-10-08
Last Updated:
June 21, 2025

Vulnerability Name

Adobe Flash Player Incorrect Default Permissions Vulnerability

Description

Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Additional Notes

  • https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq
  • https://nvd.nist.gov/vuln/detail/CVE-2013-0643

Related Weaknesses

browse all CVEs