CVE-2013-0630
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows...
CVE-2013-0630 is a high vulnerability (CVSS 10.0) in Adobe Air, published January 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.16%, the 94th percentile. Fixed in flash-plugin 0:11.2.202.261-1.el5.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 8.16%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:11.2.202.261-1.el5flash-plugin +1 more
Description
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:5::server | before 0:11.2.202.261-1.el5 | 0:11.2.202.261-1.el5 |
flash-pluginRed Hat:rhel_extras:6 | before 0:11.2.202.261-1.el6 | 0:11.2.202.261-1.el6 |
What each source reports
NVD Score used
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
- Record
CVE-2013-0630- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
- Record
CVE-2013-0630- Updated
- 2026-11-02
EUVDEUVD-2013-0641No score
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
- Record
EUVD-2013-0641- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5v5-3j9q-j9jcNo score
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows...
Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
- Record
GHSA-r5v5-3j9q-j9jc- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.opensuse.org/opensuse-updates/2013-01/msg00059.html
rhn.redhat.com/errata/RHSA-2013-0149.html
Show 9 moreShow less
adobe.com/support/security/bulletins/apsb13-01.html
nvd.nist.gov/vuln/detail/CVE-2013-0630
github.com/advisories/GHSA-r5v5-3j9q-j9jc
access.redhat.com/errata/RHSA-2013:0149
bugzilla.redhat.com/show_bug.cgi?id=893223
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0149.json
cve.org/CVERecord?id=CVE-2013-0630