CVE-2013-5324

Vulnerability

A memory corruption vulnerability exists in Adobe Flash Player versions before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x. Adobe AIR before 3.8.0.1430 and Adobe AIR SDK & Compiler before 3.8.0.1430 are also affected. The vulnerability is triggered via unspecified vectors [1].

Exploitation

An attacker can exploit this vulnerability by convincing a user to open a specially crafted Flash content, potentially delivered via a web page or email attachment. No authentication is required, and the attacker only needs to lure the user to interact with the malicious content. The exact exploitation steps are not detailed in available references, but the vulnerability is classified as memory corruption, which typically requires precise control over memory layout [1].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the affected application or cause a denial of service (memory corruption). This could lead to system compromise, data theft, or disruption of service. The impact is similar to other Flash Player vulnerabilities disclosed at the same time (CVE-2013-3361, CVE-2013-3362, CVE-2013-3363) [1].

Mitigation

Adobe has released updates for Flash Player: version 11.7.700.242 (or 11.8.800.168) for Windows and Mac, 11.2.202.310 for Linux, 11.1.111.73 for Android 2.x and 3.x, and 11.1.115.81 for Android 4.x. Adobe AIR has been updated to version 3.8.0.1430. Red Hat also issued an update (RHSA-2013:1256) for affected Red Hat Enterprise Linux and Red Hat Enterprise Linux Desktop with Adobe Flash plugin [1]. Users should apply updates immediately.