CVE-2013-3347: Integer Overflow

Published Jul 10, 2013
·
Updated

Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.

Affected Software

95 affected components
Adobe Flash Player<=11.7.700.224
Adobe Flash Player=11.0
Adobe Flash Player=11.0.1.152
Adobe Flash Player=11.0.1.153
Adobe Flash Player=11.1
Adobe Flash Player=11.1.102.55
Adobe Flash Player=11.1.102.59
Adobe Flash Player=11.1.102.62
Adobe Flash Player=11.1.102.63
Adobe Flash Player=11.1.111.8
Adobe Flash Player=11.1.111.44
Adobe Flash Player=11.1.111.50
Adobe Flash Player=11.1.111.54
Adobe Flash Player=11.1.115.7
Adobe Flash Player=11.1.115.34
Adobe Flash Player=11.1.115.48
Adobe Flash Player=11.1.115.54
Adobe Flash Player=11.1.115.58
Adobe Flash Player=11.2.202.223
Adobe Flash Player=11.2.202.228
Adobe Flash Player=11.2.202.233
Adobe Flash Player=11.2.202.235
Adobe Flash Player=11.2.202.236
Adobe Flash Player=11.2.202.238
Adobe Flash Player=11.2.202.243
Adobe Flash Player=11.2.202.251
Adobe Flash Player=11.2.202.258
Adobe Flash Player=11.2.202.261
Adobe Flash Player=11.2.202.262
Adobe Flash Player=11.2.202.270
Adobe Flash Player=11.2.202.273
Adobe Flash Player=11.2.202.275
Adobe Flash Player=11.2.202.280
Adobe Flash Player=11.2.202.285
Adobe Flash Player=11.3.300.257
Adobe Flash Player=11.3.300.262
Adobe Flash Player=11.3.300.265
Adobe Flash Player=11.3.300.268
Adobe Flash Player=11.3.300.270
Adobe Flash Player=11.3.300.271
Adobe Flash Player=11.3.300.273
Adobe Flash Player=11.4.402.265
Adobe Flash Player=11.4.402.278
Adobe Flash Player=11.4.402.287
Adobe Flash Player=11.5.502.110
Adobe Flash Player=11.5.502.135
Adobe Flash Player=11.5.502.136
Adobe Flash Player=11.5.502.146
Adobe Flash Player=11.5.502.149
Adobe Flash Player=11.6.602.167
Adobe Flash Player=11.6.602.168
Adobe Flash Player=11.6.602.171
Adobe Flash Player=11.6.602.180
Adobe Flash Player=11.7.700.169
Adobe Flash Player=11.7.700.202
Microsoft Windows
Adobe Flash Player<=11.7.700.225
Adobe Flash Player=11.7.700.224
Apple iOS and macOS
Adobe Flash Player<=11.2.202.291
Linux Linux kernel
Adobe Flash Player<=11.1.115.59
Google Android=2.0
Google Android=2.0.1
Google Android=2.1
Google Android=2.2
Google Android=2.2-rev1
Google Android=2.2.1
Google Android=2.2.2
Google Android=2.2.3
Google Android=2.3
Google Android=2.3-rev1
Google Android=2.3.1
Google Android=2.3.2
Google Android=2.3.3
Google Android=2.3.4
Google Android=2.3.5
Google Android=2.3.6
Google Android=2.3.7
Google Android=3.0
Google Android=3.1
Google Android=3.2
Google Android=3.2.1
Google Android=3.2.2
Google Android=3.2.4
Google Android=3.2.6
Adobe Flash Player<=11.1.115.63
Google Android=4.0
Google Android=4.0.1
Google Android=4.0.2
Google Android=4.0.3
Google Android=4.0.4
Google Android=4.1
Google Android=4.1.2
Google Android=4.2

Event History

Jul 10, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2013-3347?

CVE-2013-3347 is rated as critical, allowing attackers to execute arbitrary code.

2

How do I fix CVE-2013-3347?

To fix CVE-2013-3347, update Adobe Flash Player to version 11.7.700.232 or later.

3

Which software versions are affected by CVE-2013-3347?

CVE-2013-3347 affects Adobe Flash Player versions prior to 11.7.700.232 on Windows and Mac OS X, and various versions on Linux and Android.

4

Can CVE-2013-3347 be exploited remotely?

Yes, CVE-2013-3347 can be exploited remotely via malicious PCM data.

5

What are the consequences of an exploit for CVE-2013-3347?

Exploiting CVE-2013-3347 can lead to arbitrary code execution, potentially compromising the affected system.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203