9.3
CVE-2014-0507
- EPSS 6.44%
- Veröffentlicht 08.04.2014 23:55:06
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Flash Player Version <= 11.2.202.346
Adobe ≫ Flash Player Version 11.0
Adobe ≫ Flash Player Version 11.0.1.152
Adobe ≫ Flash Player Version 11.0.1.153
Adobe ≫ Flash Player Version 11.1
Adobe ≫ Flash Player Version 11.1.102.55
Adobe ≫ Flash Player Version 11.1.102.59
Adobe ≫ Flash Player Version 11.1.102.62
Adobe ≫ Flash Player Version 11.1.102.63
Adobe ≫ Flash Player Version 11.1.111.8
Adobe ≫ Flash Player Version 11.1.111.44
Adobe ≫ Flash Player Version 11.1.111.50
Adobe ≫ Flash Player Version 11.1.111.54
Adobe ≫ Flash Player Version 11.1.115.7
Adobe ≫ Flash Player Version 11.1.115.34
Adobe ≫ Flash Player Version 11.1.115.48
Adobe ≫ Flash Player Version 11.1.115.54
Adobe ≫ Flash Player Version 11.1.115.58
Adobe ≫ Flash Player Version 11.2.202.223
Adobe ≫ Flash Player Version 11.2.202.228
Adobe ≫ Flash Player Version 11.2.202.233
Adobe ≫ Flash Player Version 11.2.202.235
Adobe ≫ Flash Player Version 11.2.202.236
Adobe ≫ Flash Player Version 11.2.202.238
Adobe ≫ Flash Player Version 11.2.202.243
Adobe ≫ Flash Player Version 11.2.202.251
Adobe ≫ Flash Player Version 11.2.202.258
Adobe ≫ Flash Player Version 11.2.202.261
Adobe ≫ Flash Player Version 11.2.202.262
Adobe ≫ Flash Player Version 11.2.202.270
Adobe ≫ Flash Player Version 11.2.202.273
Adobe ≫ Flash Player Version 11.2.202.275
Adobe ≫ Flash Player Version 11.2.202.280
Adobe ≫ Flash Player Version 11.2.202.285
Adobe ≫ Flash Player Version 11.2.202.291
Adobe ≫ Flash Player Version 11.2.202.297
Adobe ≫ Flash Player Version 11.2.202.310
Adobe ≫ Flash Player Version 11.2.202.327
Adobe ≫ Flash Player Version 11.2.202.332
Adobe ≫ Flash Player Version 11.2.202.335
Adobe ≫ Flash Player Version 11.2.202.336
Adobe ≫ Flash Player Version 11.2.202.341
Adobe ≫ Adobe Air Sdk Version <= 4.0.0.1628
Adobe ≫ Adobe Air Sdk Version 3.0.0.4080
Adobe ≫ Adobe Air Sdk Version 3.1.0.488
Adobe ≫ Adobe Air Sdk Version 3.2.0.2070
Adobe ≫ Adobe Air Sdk Version 3.3.0.3650
Adobe ≫ Adobe Air Sdk Version 3.3.0.3690
Adobe ≫ Adobe Air Sdk Version 3.4.0.2540
Adobe ≫ Adobe Air Sdk Version 3.4.0.2710
Adobe ≫ Adobe Air Sdk Version 3.5.0.600
Adobe ≫ Adobe Air Sdk Version 3.5.0.880
Adobe ≫ Adobe Air Sdk Version 3.5.0.890
Adobe ≫ Adobe Air Sdk Version 3.5.0.1060
Adobe ≫ Adobe Air Sdk Version 3.6.0.599
Adobe ≫ Adobe Air Sdk Version 3.6.0.6090
Adobe ≫ Adobe Air Sdk Version 3.7.0.1530
Adobe ≫ Adobe Air Sdk Version 3.7.0.1860
Adobe ≫ Adobe Air Sdk Version 3.7.0.2090
Adobe ≫ Adobe Air Sdk Version 3.8.0.870
Adobe ≫ Adobe Air Sdk Version 3.8.0.910
Adobe ≫ Adobe Air Sdk Version 3.8.0.1430
Adobe ≫ Adobe Air Sdk Version 3.9.0.1030
Adobe ≫ Adobe Air Sdk Version 3.9.0.1210
Adobe ≫ Adobe Air Sdk Version 3.9.0.1380
Adobe ≫ Adobe Air Sdk Version 4.0.0.1390
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.44% | 0.929 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://security.gentoo.org/glsa/glsa-201405-04.xml
http://helpx.adobe.com/security/products/flash-player/apsb14-09.html
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00012.html
http://lists.opensuse.org/opensuse-updates/2014-04/msg00036.html
http://lists.opensuse.org/opensuse-updates/2014-04/msg00050.html
http://rhn.redhat.com/errata/RHSA-2014-0380.html
http://www.securityfocus.com/bid/66701
http://www.securitytracker.com/id/1030035