CVE-2013-0648β€”Adobe Flash Player Code Execution Vulnerability

PUBLISHEDvulnerability record
2024-09-17 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2013-0648
Project:
Adobe
Product:
Flash Player
Date Added:
2024-09-17
Due Date:
2024-10-08
Last Updated:
June 21, 2025

Vulnerability Name

Adobe Flash Player Code Execution Vulnerability

Description

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Additional Notes

  • https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq
  • https://nvd.nist.gov/vuln/detail/CVE-2013-0648
browse all CVEs