Adobe Flash Player Multiple Remote Code Execution Vulnerabilities (APSB13-17)

Release date:
Updated on:

Affected Systems:
Adobe Flash Player 11.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 61038
CVE (CAN) ID: CVE-2013-3344, CVE-2013-3345, CVE-2013-3347

Adobe Flash Player is an integrated multimedia Player.

Adobe Flash Player has multiple remote code execution vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary code, destroy memory, and execute DOS attacks in the context of the affected application.

<* Source: Mateusz Jurczyk
Gynvael Coldwind
Fermin Serna

Link: http://secunia.com/advisories/53975/
Http://www.adobe.com/support/security/bulletins/apsb13-17.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Adobe
-----
Adobe has released a Security Bulletin (apsb13-17) and patches for this:
Apsb13-17: Security updates available for Adobe Flash Player
Link: http://www.adobe.com/support/security/bulletins/apsb13-17.html

Patch download: http://get.adobe.com/flashplayer/