CVE-2013-5331

EXPLOITED IN THE WILD

Adobe Flash Player <11.7.700.257, 11.8.x, 11.9.x - RCE

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2013-5331 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including Metasploit, Unknown, bannedit, juan vazquez, including a Metasploit module exploits/windows/browser/adobe_flash_filters_type_confusion.

AI-analyzed exploit summary This Metasploit module exploits a type confusion vulnerability in Adobe Flash Player's ActiveX component (CVE-2013-5331) to achieve remote code execution. It delivers a malicious SWF file via a crafted HTML page targeting Internet Explorer users with vulnerable Flash versions.

Description

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/33095

This Metasploit module exploits a type confusion vulnerability in Adobe Flash Player's ActiveX component (CVE-2013-5331) to achieve remote code execution. It delivers a malicious SWF file via a crafted HTML page targeting Internet Explorer users with vulnerable Flash versions.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Adobe Flash Player 11.7, 11.8, and 11.9 prior to 11.9.900.170
No auth needed
Prerequisites: Victim must visit a malicious webpage using Internet Explorer with vulnerable Flash Player ActiveX
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC NORMAL
by Unknown, bannedit, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_filters_type_confusion.rb

This Metasploit module exploits a type confusion vulnerability in Adobe Flash Player's ActiveX component (CVE-2013-5331) to achieve remote code execution. It delivers a malicious SWF file via a crafted HTML page, targeting vulnerable Flash versions (11.7-11.9) on Windows systems.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Adobe Flash Player 11.7-11.9 (prior to 11.9.900.170)
No auth needed
Prerequisites: Target must use Internet Explorer 6-10 on Windows XP SP3 or Windows 7 SP1 · Flash Player version 11.7-11.9 must be installed
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (5)

Core 5
Core References
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1818.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html

Scores

EPSS 0.8737
EPSS Percentile 99.5%

Details

VulnCheck KEV 2013-12-11
InTheWild.io 2018-12-13
CWE
CWE-94
Status published
Products (3)
adobe/air < 3.9.0.1380
adobe/air_sdk < 3.9.0.1380
adobe/flash_player 11.0 - 11.7.700.257
Published Dec 11, 2013
Tracked Since Feb 18, 2026