CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Permissions Privileges and Access Controls
Summary: the firefox sandbox in adobe flash player before 10.3.183.67 and 11.x before 11.6.602.171 on windows and mac os x, and before 10.3.183.67 and 11.x before 11.2.202.273 on linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted swf content, as exploited in the wild in february 2013. per: http://www.adobe.com/support/security/bulletins/apsb13-08.html

'flash player 11.6.602.168 and earlier versions for windows 
flash player 11.6.602.167 and earlier versions for macintosh
flash player 11.2.202.270 and earlier for linux'
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-02-27
Last Modified Date: 2018-12-06