{"id":"CVE-2013-0643","kind":"vulnerability","aliases":["CVE-2013-0643"],"related":[],"title":"The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X,…","description":"The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","summary":"Adobe Flash Player had an incorrect default permissions flaw in its Firefox sandbox. A remote attacker who gets a victim to load crafted SWF content can run arbitrary code.","severity":"critical","cvss":9.3,"epss":null,"exploited":true,"exploited_at":"2024-09-17T00:00:00+00:00","products":[{"name":"adobe flash player","fixed":["10.3.183.67"],"affected":"< 10.3.183.67","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["11.6.602.171"],"affected":">= 11.0, < 11.6.602.171","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["11.2.202.273"],"affected":">= 11.0, < 11.2.202.273","ecosystem":"vendor"},{"name":"redhat enterprise linux desktop","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"redhat enterprise linux eus","fixed":[],"affected":"= 5.9","ecosystem":"vendor"},{"name":"redhat enterprise linux eus","fixed":[],"affected":"= 6.4","ecosystem":"vendor"},{"name":"redhat enterprise linux server","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"redhat enterprise linux server aus","fixed":[],"affected":"= 5.9","ecosystem":"vendor"},{"name":"redhat enterprise linux server aus","fixed":[],"affected":"= 6.4","ecosystem":"vendor"},{"name":"redhat enterprise linux workstation","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"opensuse","fixed":[],"affected":"= 11.4","ecosystem":"vendor"},{"name":"opensuse","fixed":[],"affected":"= 12.1","ecosystem":"vendor"},{"name":"suse linux enterprise desktop","fixed":[],"affected":"= 10","ecosystem":"vendor"},{"name":"suse linux enterprise desktop","fixed":[],"affected":"= 11","ecosystem":"vendor"},{"name":"Adobe Flash Player","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe-flash","exploited","firefox","linux","macos","other","windows"],"not_affected_if":["flash-not-installed"],"how_to_check":null,"fix":"Remove Adobe Flash Player, which is end-of-life; CISA says users should discontinue use of the product.","status":"open","published_at":"2013-02-27T00:55:01+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:58:07+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-23T20:58:07Z","model":"claude-haiku-5-5","output":{"fix":"Remove Adobe Flash Player, which is end-of-life; CISA says users should discontinue use of the product.","reach":"internet","impact":"high","summary":"Adobe Flash Player had an incorrect default permissions flaw in its Firefox sandbox. A remote attacker who gets a victim to load crafted SWF content can run arbitrary code.","category":"other","who_cares":["adobe-flash","firefox","windows","macos","linux"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the victim's machine via crafted SWF content.","analyst_note":"","how_to_check":"unknown","needs_analyst":false,"not_affected_if":["flash-not-installed"],"user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000432,"input_tokens":2836,"output_tokens":296,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0643':23A,26A '-2013':22A,25A '10.3.183.67':9A,125C,139C '11':11A,127C,141C '11.2.202.273':144C '11.6.602.171':14A,130C '2013':174C 'adob':5A,80B,88B,121C 'adobe':27A,30A,33A,76A 'adobe-flash':79B 'arbitrari':115B,161C 'attack':103B,158C 'aus':56A,61A 'code':116B,162C 'content':112B,166C 'craft':110B,164C 'cve':21A,24A 'default':94B 'desktop':39A,71A,75A 'easier':155C 'enterprise':37A,41A,45A,49A,53A,58A,63A,70A,74A 'eus':43A,47A 'execut':160C 'exploit':82B,168C 'februari':173C 'firefox':2A,83B,99B,118C 'flash':6A,28A,31A,34A,77A,81B,89B,122C 'flaw':96B 'get':105B 'incorrect':93B 'linux':38A,42A,46A,50A,54A,59A,64A,69A,73A,84B,146C 'load':109B 'mac':18A,134C 'maco':85B 'make':153C 'opensuse':66A,67A 'os':19A,135C 'permiss':95B 'player':7A,29A,32A,35A,78A,90B,123C 'privileg':151C 'proper':149C 'redhat':36A,40A,44A,48A,52A,57A,62A 'remot':102B,157C 'restrict':150C 'run':114B 'sandbox':3A,100B,119C 'server':51A,55A,60A 'suse':68A,72A 'swf':111B,165C 'via':163C 'victim':107B 'wild':171C 'window':16A,87B,132C 'workstation':65A 'x':12A,20A,128C,136C,142C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2013-02-27T00:55:01+00:00","kev":{"dateAdded":"2024-09-17","dueDate":"2024-10-08","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2013-0643","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0643","severity":null,"published_at":"2024-09-17T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T16:39:46+00:00","note":null},{"source":"nvd","external_id":"CVE-2013-0643","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0643","severity":null,"published_at":"2013-02-27T00:55:01+00:00","modified_at":"2026-06-16T23:49:49+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}