Total vulnerabilities in the database
Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.
| Software | From | Fixed in |
|---|---|---|
| adobe / flash_player | 11.0 | 11.7.700.257 |
| adobe / flash_player | 11.8 | 11.8.800.175 |
| adobe / flash_player | 11.9 | 11.9.900.700 |
| adobe / flash_player | 11.0 | 11.2.202.332 |
| adobe / air | - | 3.9.0.1380 |
| adobe / air_sdk | - | 3.9.0.1380 |