What’s Vulnerable › Vulnerabilities

CVE-2013-5332

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-12-11 · updated 2026-06-16
• Weakness: CWE-94

Description

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected products

• Adobe Air: before 3.9.0.1380 — fixed in 3.9.0.1380
• Adobe Air Sdk: before 3.9.0.1380 — fixed in 3.9.0.1380
• Adobe Flash Player 24.0.0.186 and earlier.: from 11.0 before 11.7.700.257; from 11.8 before 11.8.800.175; from 11.9 before 11.9.900.700; from 11.0 before 11.2.202.332 — fixed in 11.2.202.332, 11.7.700.257, 11.8.800.175, 11.9.900.700

How to fix

Upgrade to a fixed version: Adobe Air 3.9.0.1380; Adobe Air Sdk 3.9.0.1380; Adobe Flash Player 24.0.0.186 and earlier. 11.2.202.332, 11.7.700.257, 11.8.800.175, 11.9.900.700. Check the vendor advisory for mitigations.

References

• http://helpx.adobe.com/security/products/flash-player/apsb13-28.html
• http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html
• http://rhn.redhat.com/errata/RHSA-2013-1818.html
• http://helpx.adobe.com/security/products/flash-player/apsb13-28.html
• http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html
• http://rhn.redhat.com/errata/RHSA-2013-1818.html

Get alerted when CVE-2013-5332 or the next vulnerability affects your stack