ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html

Resource:

x_refsource_MISC

Hyperlink: http://support.apple.com/kb/HT4435

Resource:

x_refsource_CONFIRM

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1

Resource:

x_refsource_CONFIRM

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2011/0344

Resource:

vdb-entry

x_refsource_VUPEN

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.vupen.com/english/advisories/2010/2918

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vupen.com/english/advisories/2010/3111

Resource:

vdb-entry

x_refsource_VUPEN

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0834.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.securitytracker.com/id?1024660

Resource:

vdb-entry

x_refsource_SECTRACK

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0934.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2010/2903

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vupen.com/english/advisories/2011/0173

Resource:

vdb-entry

x_refsource_VUPEN

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-26.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.kb.cert.org/vuls/id/298081

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://www.securitytracker.com/id?1024659

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt

Resource:

vendor-advisory

x_refsource_TURBO

Hyperlink: http://www.securityfocus.com/bid/44504

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.adobe.com/support/security/advisories/apsa10-05.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-28.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://securityreason.com/securityalert/8210

Resource:

third-party-advisory

x_refsource_SREASON

Hyperlink: http://www.vupen.com/english/advisories/2010/2906

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0867.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0829.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294

Resource:

vdb-entry

signature

x_refsource_OVAL

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2011/0192	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/42183	third-party-advisory x_refsource_SECUNIA x_transferred
http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html	x_refsource_MISC x_transferred
http://support.apple.com/kb/HT4435	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/42030	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/0191	vdb-entry x_refsource_VUPEN x_transferred
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/43025	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/0344	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43026	third-party-advisory x_refsource_SECUNIA x_transferred
http://security.gentoo.org/glsa/glsa-201101-09.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.vupen.com/english/advisories/2010/2918	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2010/3111	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/41917	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
http://security.gentoo.org/glsa/glsa-201101-08.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0834.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securitytracker.com/id?1024660	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/42926	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0934.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2010/2903	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2011/0173	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/42401	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.adobe.com/support/security/bulletins/apsb10-26.html	x_refsource_CONFIRM x_transferred
http://www.kb.cert.org/vuls/id/298081	third-party-advisory x_refsource_CERT-VN x_transferred
http://www.securitytracker.com/id?1024659	vdb-entry x_refsource_SECTRACK x_transferred
http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt	vendor-advisory x_refsource_TURBO x_transferred
http://www.securityfocus.com/bid/44504	vdb-entry x_refsource_BID x_transferred
http://www.adobe.com/support/security/advisories/apsa10-05.html	x_refsource_CONFIRM x_transferred
http://www.adobe.com/support/security/bulletins/apsb10-28.html	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html	vendor-advisory x_refsource_SUSE x_transferred
http://securityreason.com/securityalert/8210	third-party-advisory x_refsource_SREASON x_transferred
http://www.vupen.com/english/advisories/2010/2906	vdb-entry x_refsource_VUPEN x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0867.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0829.html	vendor-advisory x_refsource_REDHAT x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294	vdb-entry signature x_refsource_OVAL x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0192

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://support.apple.com/kb/HT4435

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0344

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2918

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/3111

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0834.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.securitytracker.com/id?1024660

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0934.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2903

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0173

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-26.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/298081

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://www.securitytracker.com/id?1024659

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt

Resource:

vendor-advisory

x_refsource_TURBO

x_transferred

Hyperlink: http://www.securityfocus.com/bid/44504

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.adobe.com/support/security/advisories/apsa10-05.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-28.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://securityreason.com/securityalert/8210

Resource:

third-party-advisory

x_refsource_SREASON

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2906

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0867.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0829.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:29 Oct, 2010 | 19:00

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

>>flash_player>>Versions up to 10.1.85.3(inclusive)

cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*

>>flash_player>>6.0.21.0

cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*

>>flash_player>>6.0.79

cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*

>>flash_player>>7.0

cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*

>>flash_player>>7.0.1

cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*

>>flash_player>>7.0.25

cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*

>>flash_player>>7.0.63

cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*

>>flash_player>>7.0.69.0

cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*

>>flash_player>>7.0.70.0

cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*

>>flash_player>>7.1

cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*

>>flash_player>>7.1.1

cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*

>>flash_player>>7.2

cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*

>>flash_player>>8.0

cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*

>>flash_player>>8.0.22.0

cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*

>>flash_player>>8.0.24.0

cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*

>>flash_player>>8.0.33.0

cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*

>>flash_player>>8.0.34.0

cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*

>>flash_player>>8.0.35.0

cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*

>>flash_player>>8.0.39.0

cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*

>>flash_player>>8.0.42.0

cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*

>>flash_player>>9.0.16

cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*

>>flash_player>>9.0.18d60

cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*

>>flash_player>>9.0.20

cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*

>>flash_player>>9.0.20.0

cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*

>>flash_player>>9.0.28

cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*

>>flash_player>>9.0.28.0

cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*

>>flash_player>>9.0.31

cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*

>>flash_player>>9.0.31.0

cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*

>>flash_player>>9.0.45.0

cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*

>>flash_player>>9.0.47.0

cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*

>>flash_player>>9.0.48.0

cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*

>>flash_player>>9.0.112.0

cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*

>>flash_player>>9.0.114.0

cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*

>>flash_player>>9.0.115.0

cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*

>>flash_player>>9.0.124.0

cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*

>>flash_player>>9.0.125.0

cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*

>>flash_player>>9.0.151.0

cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*

>>flash_player>>9.0.152.0

cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*

>>flash_player>>9.0.159.0

cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*

>>flash_player>>9.0.246.0

cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*

>>flash_player>>9.0.260.0

cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*

>>flash_player>>9.125.0

cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*

>>flash_player>>10.0.0.584

cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*

>>flash_player>>10.0.12.10

cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*

>>flash_player>>10.0.12.36

cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*

>>flash_player>>10.0.15.3

cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*

>>flash_player>>10.0.22.87

cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*

>>flash_player>>10.0.32.18

cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*

>>flash_player>>10.0.42.34

cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*

>>flash_player>>10.0.45.2

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1	psirt@adobe.com	N/A
http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html	psirt@adobe.com	Exploit
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html	psirt@adobe.com	N/A
http://secunia.com/advisories/41917	psirt@adobe.com	Vendor Advisory
http://secunia.com/advisories/42030	psirt@adobe.com	N/A
http://secunia.com/advisories/42183	psirt@adobe.com	N/A
http://secunia.com/advisories/42401	psirt@adobe.com	N/A
http://secunia.com/advisories/42926	psirt@adobe.com	N/A
http://secunia.com/advisories/43025	psirt@adobe.com	N/A
http://secunia.com/advisories/43026	psirt@adobe.com	N/A
http://security.gentoo.org/glsa/glsa-201101-08.xml	psirt@adobe.com	N/A
http://security.gentoo.org/glsa/glsa-201101-09.xml	psirt@adobe.com	N/A
http://securityreason.com/securityalert/8210	psirt@adobe.com	N/A
http://support.apple.com/kb/HT4435	psirt@adobe.com	N/A
http://www.adobe.com/support/security/advisories/apsa10-05.html	psirt@adobe.com	Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-26.html	psirt@adobe.com	N/A
http://www.adobe.com/support/security/bulletins/apsb10-28.html	psirt@adobe.com	N/A
http://www.kb.cert.org/vuls/id/298081	psirt@adobe.com	US Government Resource
http://www.redhat.com/support/errata/RHSA-2010-0829.html	psirt@adobe.com	N/A
http://www.redhat.com/support/errata/RHSA-2010-0834.html	psirt@adobe.com	N/A
http://www.redhat.com/support/errata/RHSA-2010-0867.html	psirt@adobe.com	N/A
http://www.redhat.com/support/errata/RHSA-2010-0934.html	psirt@adobe.com	N/A
http://www.securityfocus.com/bid/44504	psirt@adobe.com	N/A
http://www.securitytracker.com/id?1024659	psirt@adobe.com	N/A
http://www.securitytracker.com/id?1024660	psirt@adobe.com	N/A
http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2010/2903	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2010/2906	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2010/2918	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2010/3111	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2011/0173	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2011/0191	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2011/0192	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2011/0344	psirt@adobe.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294	psirt@adobe.com	N/A
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/41917	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/42030	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/42183	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/42401	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/42926	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43025	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43026	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201101-08.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201101-09.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securityreason.com/securityalert/8210	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4435	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/advisories/apsa10-05.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-26.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/bulletins/apsb10-28.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/298081	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.redhat.com/support/errata/RHSA-2010-0829.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2010-0834.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2010-0867.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2010-0934.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/44504	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1024659	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1024660	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/2903	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/2906	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/2918	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/3111	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0173	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0191	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0192	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0344	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html

Source: psirt@adobe.com

Resource:

Exploit

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource:

Vendor Advisory

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://securityreason.com/securityalert/8210

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4435

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/advisories/apsa10-05.html

Source: psirt@adobe.com

Resource:

Vendor Advisory

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-26.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-28.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.kb.cert.org/vuls/id/298081

Source: psirt@adobe.com

Resource:

US Government Resource

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0829.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0834.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0867.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0934.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/44504

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1024659

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1024660

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2903

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2906

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2918

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/3111

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0173

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0192

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0344

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://securityreason.com/securityalert/8210

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4435

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/advisories/apsa10-05.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-26.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-28.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.kb.cert.org/vuls/id/298081

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0829.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0834.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0867.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0934.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/44504

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1024659

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1024660

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2903

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2906

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2918

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/3111

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0173

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0192

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0344

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

9840Records found

CVE-2013-3184

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-78.92% / 99.02%

7 Day CHG~0.00%

Published-14 Aug, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3885

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-22.26% / 95.67%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3872, CVE-2013-3873, and CVE-2013-3882.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3871

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-25.77% / 96.12%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3873

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-24.62% / 96.00%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3854

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-53.66% / 97.92%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3853.

Product-word office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3914

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-27.92% / 96.34%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3917

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-31.14% / 96.63%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3915.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3209

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-27.25% / 96.28%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3201, CVE-2013-3203, CVE-2013-3206, and CVE-2013-3207.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3849

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-63.58% / 98.37%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3858.

Product-office_web_apps word_viewer office_compatibility_pack sharepoint_server word n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3203

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-42.34% / 97.35%

7 Day CHG+1.70%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3156

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-53.23% / 97.90%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access File Format Memory Corruption Vulnerability."

Product-access n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3850

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-53.66% / 97.92%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."

Product-word word_viewer office_compatibility_pack n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3662

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-15.91% / 94.59%

7 Day CHG~0.00%

Published-01 Jul, 2014 | 17:00

Updated-12 Apr, 2025 | 10:46

Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow.

Vendor-n/a Google LLC

Product-sketchup n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3858

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-63.58% / 98.37%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Product-office_web_apps word_viewer office_compatibility_pack sharepoint_server word n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3910

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-27.21% / 96.27%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3139

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-31.11% / 96.63%

7 Day CHG~0.00%

Published-12 Jun, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3121, and CVE-2013-3142.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3201

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-27.25% / 96.28%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3203, CVE-2013-3206, CVE-2013-3207, and CVE-2013-3209.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3202

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-27.25% / 96.28%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3875

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-22.26% / 95.67%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3111

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-41.04% / 97.28%

7 Day CHG~0.00%

Published-12 Jun, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3123.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3119

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-31.11% / 96.63%

7 Day CHG~0.00%

Published-12 Jun, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3155

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-58.02% / 98.13%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Product-access n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-1003

Matching Score-10

Matching Score-10

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_7 windows_10 windows_server_2008 Windows Server 2008 R2 Windows Server 2012 R2 Windows Server 2016 Windows 10 Windows Server 2012 Windows 8.1 Windows 7 Windows RT 8.1 Windows Server 2008

CVSS Score-7.8||HIGH

EPSS-29.17% / 96.46%

7 Day CHG~0.00%

Published-12 Apr, 2018 | 01:00

Updated-05 Aug, 2024 | 03:44

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10.

Vendor-Microsoft Corporation

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1315

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-73.68% / 98.78%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Product-office_web_apps sharepoint_portal_server sharepoint_services office_compatibility_pack excel sharepoint_server office excel_viewer sharepoint_foundation n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0989

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-6.10% / 90.57%

7 Day CHG~0.00%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP3 file.

Product-quicktime windows_xp windows_vista windows_7 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0988

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-6.10% / 90.57%

7 Day CHG~0.00%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FPX file.

Product-quicktime windows_xp windows_vista windows_7 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1302

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-44.41% / 97.46%

7 Day CHG~0.00%

Published-15 May, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."

Product-office_communicator lync lync_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1022

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.35%

7 Day CHG~0.00%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.

Product-quicktime windows_xp windows_vista windows_7 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0986

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.66% / 87.61%

7 Day CHG~0.00%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.

Product-windows_7 windows_vista windows_xp mac_os_x quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1325

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-57.18% / 98.08%

7 Day CHG-2.58%

Published-13 Nov, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "Word Heap Overwrite Vulnerability."

Product-office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-12855

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-3.37% / 87.08%

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1015

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-5.18% / 89.67%

7 Day CHG-1.36%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.

Product-quicktime windows_xp windows_vista windows_7 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0999

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.31% / 79.42%

7 Day CHG~0.00%

Published-19 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.

Product-windows_7 iphone_os itunes windows_vista windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0984

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-9.86% / 92.81%

7 Day CHG~0.00%

Published-05 Jun, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted message.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1021

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.94% / 89.40%

7 Day CHG-1.30%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG data in a movie file.

Product-quicktime windows_xp windows_vista windows_7 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1346

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-18.26% / 95.04%

7 Day CHG~0.00%

Published-15 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.

Product-malware_protection_engine n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1000

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.31% / 79.42%

7 Day CHG~0.00%

Published-19 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 iphone_os itunes windows_vista windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1017

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-81.30% / 99.13%

7 Day CHG~0.00%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.

Product-quicktime windows_xp windows_vista windows_7 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1324

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-57.18% / 98.08%

7 Day CHG-2.58%

Published-13 Nov, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "Word Stack Buffer Overwrite Vulnerability."

Product-office_2013_rt office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1035

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.71% / 82.00%

7 Day CHG~0.00%

Published-19 Sep, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Vendor-n/a Apple Inc.

Product-itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1019

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.63% / 87.56%

7 Day CHG~0.00%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

Product-windows_7 iphone_os windows_vista windows_xp quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1018

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.59% / 88.98%

7 Day CHG~0.00%

Published-24 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

Product-quicktime windows_xp windows_vista windows_7 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0003

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-61.32% / 98.27%

7 Day CHG~0.00%

Published-09 Jan, 2013 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability."

Product-windows_8 .net_framework windows_server_2003 windows_vista windows_server_2012 windows_xp windows_rt windows_7 windows_server_2008 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0634

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-89.24% / 99.53%

7 Day CHG~0.00%

Published-08 Feb, 2013 | 11:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player linux_kernel windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0030

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-35.00% / 96.92%

7 Day CHG~0.00%

Published-13 Feb, 2013 | 11:00

Updated-11 Apr, 2025 | 00:51

The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via a crafted web site, aka "VML Memory Corruption Vulnerability."

Product-windows_rt windows_7 windows_8 windows_server_2008 internet_explorer windows_vista windows_server_2003 windows_server_2012 windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0082

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-53.23% / 97.90%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "WPD File Format Memory Corruption Vulnerability."

Product-office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0002

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-61.21% / 98.27%

7 Day CHG~0.00%

Published-09 Jan, 2013 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability."

Product-windows_8 .net_framework windows_server_2003 windows_vista windows_server_2012 windows_xp windows_rt windows_7 windows_server_2008 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1797

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-48.44% / 97.66%

7 Day CHG~0.00%

Published-16 Aug, 2010 | 18:25

Updated-11 Apr, 2025 | 00:51

Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.

Vendor-n/a Apple Inc.

Product-iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-3664

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.83% / 85.86%

7 Day CHG~0.00%

Published-25 Jul, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.

Vendor-n/a Apple Inc.

Product-safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-3663

Matching Score-10

Assigner-Apple Inc.