CVE-2013-3348: Buffer Overflow
Published Jul 10, 2013
·Updated
Adobe Shockwave Player before 12.0.3.133 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Affected Software
54 affected components
Adobe Shockwave Player<=12.0.2.122
Adobe Shockwave Player=1.0
Adobe Shockwave Player=2.0
Adobe Shockwave Player=3.0
Adobe Shockwave Player=4.0
Adobe Shockwave Player=5.0
Adobe Shockwave Player=6.0
Adobe Shockwave Player=8.0
Adobe Shockwave Player=8.0.196
Adobe Shockwave Player=8.0.196a
Adobe Shockwave Player=8.0.204
Adobe Shockwave Player=8.0.205
Adobe Shockwave Player=8.5.1
Adobe Shockwave Player=8.5.1.100
Adobe Shockwave Player=8.5.1.103
Adobe Shockwave Player=8.5.1.105
Adobe Shockwave Player=8.5.1.106
Adobe Shockwave Player=8.5.321
Adobe Shockwave Player=8.5.323
Adobe Shockwave Player=8.5.324
Adobe Shockwave Player=8.5.325
Adobe Shockwave Player=9
Adobe Shockwave Player=9.0.383
Adobe Shockwave Player=9.0.432
Adobe Shockwave Player=10.0.0.210
Adobe Shockwave Player=10.0.1.004
Adobe Shockwave Player=10.1.0.11
Adobe Shockwave Player=10.1.0.011
Adobe Shockwave Player=10.1.1.016
Adobe Shockwave Player=10.1.4.020
Adobe Shockwave Player=10.2.0.021
Adobe Shockwave Player=10.2.0.022
Adobe Shockwave Player=10.2.0.023
Adobe Shockwave Player=11.0.0.456
Adobe Shockwave Player=11.0.3.471
Adobe Shockwave Player=11.5.0.595
Adobe Shockwave Player=11.5.0.596
Adobe Shockwave Player=11.5.1.601
Adobe Shockwave Player=11.5.2.602
Adobe Shockwave Player=11.5.6.606
Adobe Shockwave Player=11.5.7.609
Adobe Shockwave Player=11.5.8.612
Adobe Shockwave Player=11.5.9.615
Adobe Shockwave Player=11.5.9.620
Adobe Shockwave Player=11.5.10.620
Adobe Shockwave Player=11.6.0.626
Adobe Shockwave Player=11.6.1.629
Adobe Shockwave Player=11.6.3.633
Adobe Shockwave Player=11.6.4.634
Adobe Shockwave Player=11.6.5.635
Adobe Shockwave Player=11.6.6.636
Adobe Shockwave Player=11.6.7.637
Adobe Shockwave Player=11.6.8.638
Adobe Shockwave Player=12.0.0.112
Remediation
Event History
Jul 10, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3348?
CVE-2013-3348 has a critical severity level due to its potential for arbitrary code execution and denial of service.
2
How do I fix CVE-2013-3348?
To fix CVE-2013-3348, you should upgrade to Adobe Shockwave Player version 12.0.3.133 or later.
3
What types of attacks can CVE-2013-3348 facilitate?
CVE-2013-3348 can facilitate arbitrary code execution and memory corruption attacks, potentially compromising the system.
4
Is CVE-2013-3348 applicable to all versions of Adobe Shockwave Player?
CVE-2013-3348 affects all versions of Adobe Shockwave Player prior to 12.0.3.133.
5
What are the consequences of not addressing CVE-2013-3348?
Neglecting to address CVE-2013-3348 could lead to system compromise and data breaches due to exploited vulnerabilities.