Vulnerability Description
Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
CVSS Score
10.0
HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Shockwave Player | <= 12.0.0.112 |
Related Weaknesses (CWE)
References
- http://www.adobe.com/support/security/bulletins/apsb13-12.htmlPatchVendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb13-12.htmlPatchVendor Advisory
FAQ
What is CVE-2013-1385?
CVE-2013-1385 is a vulnerability with a CVSS score of 10.0 (HIGH). Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
How severe is CVE-2013-1385?
CVE-2013-1385 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-1385?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Shockwave Player.