EXPOSURES › CVE-2013-0643

CVE-2013-0643

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2024-09-17 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2013-0643 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 85/100 rceexploited-in-wildunpatchedransomware

Adobe Flash Player's discontinued status leaves unpatched RCE vulnerabilities exploitable in legacy systems.

Adobe Flash Player reached end-of-life in December 2020 with no security patches, leaving installations perpetually vulnerable to remote code execution via crafted SWF content. DIB organizations must ensure no legacy Flash Player instances remain in production environments to avoid compliance violations and unpatched attack surfaces.

Shame score — The vendor discontinued the product without providing security updates, leaving known vulnerabilities unpatched and exploitable indefinitely.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Adobe · vendor Flash Player · product

DESCRIPTION

Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.

AFFECTED FEDRAMP PRODUCTS · 8

PRODUCT	PROVIDER	STATUS	MATCH
Adobe Acrobat Sign for Government Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager Adobe	Adobe	Authorized	vendor-exact · 0.90