Exploitation ongoing with high activity in latest observed window (4 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-10-08. The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
8 versions affected across 11 products
CVE-2013-0648: RCE via crafted SWF abusing Flash ExternalInterface; CISA adds CVE-2013-0648 to KEV and directs full discontinuation of the EoL product.
Post summary
CISA has listed CVE-2013-0648 on its Known Exploited Vulnerabilities catalog, indicating real‑world exploitation; the flaw is a remote code execution via crafted SWF, and the advisory recommends discontinuing the end‑of‑life product.
NVD and MITRE both record the vulnerability under CVE-2013-0648, with the concise description matching CISA’s summary of the exploitation path NVD entry MITRE CVE. Translation: if a system still renders or executes Flash SWF files, a malicious SWF can seize control.
Post summary
The post references CVE‑2013‑0648 as documented by NVD, MITRE, and CISA, describing that a malicious Flash SWF file can exploit systems still rendering the content to seize control.
What happened CISA has added Adobe Flash Player CVE-2013-0648 to its Known Exploited Vulnerabilities (KEV) catalog, signaling confirmed exploitation in the wild CISA KEV. The entry’s required action is explicit: the impacted product is end-of-life/end-of-service and…
Post summary
CISA has categorized Adobe Flash Player CVE-2013-0648 as a known exploited vulnerability, confirming that it is actively being abused in the wild.
https://research.lyrie.ai/research/active-exploit-cve-2013-0648-flash-player #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The linked research suggests that CVE‑2013‑0648 in Adobe Flash Player is being actively exploited in the wild, though no exploit code, patch, or technical details are supplied.
15 of 15 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | flash_player | - | - | - |
| OS | apple | mac_os_x | - | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |
| OS | opensuse | opensuse | 11.4 | - | - |
| OS | opensuse | opensuse | 12.1 | - | - |
| OS | redhat | enterprise_linux_desktop | 6.0 | - | - |
| OS | redhat | enterprise_linux_eus | 5.9 | - | - |
| OS | redhat | enterprise_linux_eus | 6.4 | - | - |
| OS | redhat | enterprise_linux_server | 6.0 | - | - |
| OS | redhat | enterprise_linux_server_aus | 5.9 | - | - |
| OS | redhat | enterprise_linux_server_aus | 6.4 | - | - |
| OS | redhat | enterprise_linux_workstation | 6.0 | - | - |
| OS | suse | linux_enterprise_desktop | 10 | - | - |
| OS | suse | linux_enterprise_desktop | 11 | - | - |