CVE-2013-2555

Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

• CWE-190

• http://archives.neohapsis.com/archives/bugtraq/2013-04/0197.htmlBroken Link
• http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157Permissions Required
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=139455789818399&w=2Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0730.htmlThird Party Advisory
• http://twitter.com/VUPEN/statuses/309713355466227713Broken Link
• http://twitter.com/thezdi/statuses/309756927301283840Third Party Advisory
• http://www.adobe.com/support/security/bulletins/apsb13-11.htmlVendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2013-04/0197.htmlBroken Link
• http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157Permissions Required
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00081.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=139455789818399&w=2Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0730.htmlThird Party Advisory
• http://twitter.com/VUPEN/statuses/309713355466227713Broken Link
• http://twitter.com/thezdi/statuses/309756927301283840Third Party Advisory
• http://www.adobe.com/support/security/bulletins/apsb13-11.htmlVendor Advisory

Published

Mar 11, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2549Unspecified vulnerability in Adobe Reader 11.0.02 allows rem…
• CVE-2013-2550Unspecified vulnerability in Adobe Reader 11.0.02 allows att…
• CVE-2013-2551Use-after-free vulnerability in Microsoft Internet Explorer …8.8
• CVE-2013-2552Unspecified vulnerability in Microsoft Internet Explorer 10 …
• CVE-2013-2553Unspecified vulnerability in the kernel in Microsoft Windows…
• CVE-2013-2554Unspecified vulnerability in Microsoft Windows 7 allows atta…
• CVE-2013-2556Unspecified vulnerability in Microsoft Windows Vista SP2, Wi…
• CVE-2013-2557The sandbox protection mechanism in Microsoft Internet Explo…
• CVE-2013-2558Unspecified vulnerability in Microsoft Windows 8 allows remo…
• CVE-2013-2559SQL injection vulnerability in Symphony CMS before 2.3.2 all…
• CVE-2013-2560Directory traversal vulnerability in the web interface on Fo…
• CVE-2013-2561OpenFabrics ibutils 1.5.7 allows local users to overwrite ar…