CVE-2013-0504
Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11...
CVE-2013-0504 is a high vulnerability (CVSS 10.0) in Adobe Flash Player, published February 27, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.52%, the 95th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 9.52%EPSS, 95th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs | before 0:11.2.202.273-1.el5 | 0:11.2.202.273-1.el5 |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 3 CVEs | before 0:11.2.202.273-1.el6 | 0:11.2.202.273-1.el6 |
What each source reports
NVD Score used
Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
- Record
CVE-2013-0504- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
- Record
CVE-2013-0504- Updated
- 2026-11-02
EUVDEUVD-2013-0515No score
Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
- Record
EUVD-2013-0515- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-86c6-f69r-wvg4No score
Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11...
Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
- Record
GHSA-86c6-f69r-wvg4- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/58184
rhn.redhat.com/errata/RHSA-2013-0574.html
adobe.com/support/security/bulletins/apsb13-08.html
lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html
Show 16 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-0504
github.com/advisories/GHSA-86c6-f69r-wvg4
access.redhat.com/errata/RHSA-2013:0574
bugzilla.redhat.com/show_bug.cgi?id=915961
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0574.json
cve.org/CVERecord?id=CVE-2013-0504
cisa.gov/known-exploited-vulnerabilities-catalog