10

CVE-2014-0502

Warnung
Exploit

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Flash Player Version < 11.7.700.269
   Apple ≫ macOS X Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Flash Player Version >= 11.8.800.94 < 12.0.0.70
   Apple ≫ macOS X Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Adobe Air Sdk Version < 4.0.0.1628
Adobe ≫ Flash Player Version < 11.2.202.341
   Linux ≫ Linux Kernel Version-
Adobe ≫ Adobe Air Version < 4.0.0.1628
   Google ≫ Android Version-
Opensuse ≫ Opensuse Version11.4
Opensuse ≫ Opensuse Version12.3
Opensuse ≫ Opensuse Version13.1
Suse ≫ Linux Enterprise Desktop Version11 Updatesp3
Redhat ≫ Enterprise Linux Eus Version6.5

17.09.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Adobe Flash Player Double Free Vulnerablity

Schwachstelle

Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.

Beschreibung

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 85.67% 0.993
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.