Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Adobe Flash Player and AIR could let attackers run code

CVE-2013-0630 · published 13 years ago
Summary

Versions of Adobe Flash Player and Adobe AIR on Windows, macOS, Linux, and Android, as well as older AIR development kits, contain a memory error that could let a hacker run their own programs on a victim’s computer. This could let them take control of the system or steal data. Updating to the latest versions of Flash Player and AIR or removing them if they’re not needed will protect you.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe flash_player <= 10.3.183.48
10.3.181.14
10.3.181.16
10.3.181.22
10.3.181.23
10.3.181.26
10.3.181.34
10.3.183.5
10.3.183.7
10.3.183.10
10.3.183.11
10.3.183.15
19 more version ranges
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
adobe flash_player_for_android <= 11.1.115.34
11.1.115.6
11.1.115.7
11.1.115.8
11.1.115.11
11.1.115.12
11.1.115.17
11.1.115.20
11.1.115.27
<= 11.1.111.29
11.0.1.153
11.1.102.59
9 more version ranges
cpe:2.3:a:adobe:flash_player_for_android:*:*:*:*:*:*:*:*
adobe adobe_air <= 3.5.0.890
3.5.0.600
3.5.0.880
cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*
adobe adobe_air_sdk <= 3.5.0.890
3.5.0.600
3.5.0.880
cpe:2.3:a:adobe:adobe_air_sdk:*:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Androi...
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
8% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published11 Jan 2013
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-0630 · NVD
Track software like this
Free during beta