CVE-2013-0634
EXPLOITED IN THE WILD RANSOMWAREAdobe Flash Player <10.3.183.51-11.5.502.149 - RCE
Title source: llmExploitation Summary
CVE-2013-0634 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io), including in ransomware campaigns.
EIP tracks 3 public exploits from researchers including Metasploit, d0now, Unknown, Boris, Ryutin, juan vazquez, including a Metasploit module exploits/windows/browser/adobe_flash_regex_value.
AI-analyzed exploit summary This Metasploit module exploits a heap overflow vulnerability in Adobe Flash Player's ActiveX component via a crafted SWF file with a malicious regex, leading to remote code execution. It leverages predictable SharedUserData to bypass ASLR and has been tested on Windows XP/7 with Flash Player versions before 11.5.502.149.
Description
Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013.
Exploits (3)
This Metasploit module exploits a heap overflow vulnerability in Adobe Flash Player's ActiveX component via a crafted SWF file with a malicious regex, leading to remote code execution. It leverages predictable SharedUserData to bypass ASLR and has been tested on Windows XP/7 with Flash Player versions before 11.5.502.149.
This Metasploit module exploits a heap overflow vulnerability in Adobe Flash Player's ActiveX component by delivering a crafted SWF file with a malicious regex value, leading to remote code execution. It leverages predictable SharedUserData to bypass ASLR and has been tested on Windows XP SP3 and Windows 7 SP1.