10

CVE-2014-0552

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Adobe Air Version <= 14.0.0.178
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 13.0.0.83
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 13.0.0.111
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 14.0.0.110
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 14.0.0.137
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version <= 11.2.202.400
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.223
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.228
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.233
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.235
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.236
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.238
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.243
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.251
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.258
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.261
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.262
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.270
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.273
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.275
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.280
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.285
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.291
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.297
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.310
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.332
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.335
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.336
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.341
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.346
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.350
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.356
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.359
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.378
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version 11.2.202.394
   Linux ≫ Linux Kernel
Adobe ≫ Flash Player Version <= 13.0.0.241
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 13.0.0.182
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 13.0.0.201
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 13.0.0.206
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 13.0.0.214
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 13.0.0.223
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 13.0.0.231
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 14.0.0.125
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 14.0.0.145
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 14.0.0.176
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 14.0.0.179
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 15.0.0.144
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version <= 14.0.0.179
   Google ≫ Android
Adobe ≫ Adobe Air Version 13.0.0.83
   Google ≫ Android
Adobe ≫ Adobe Air Version 13.0.0.111
   Google ≫ Android
Adobe ≫ Adobe Air Version 14.0.0.110
   Google ≫ Android
Adobe ≫ Adobe Air Version 14.0.0.137
   Google ≫ Android
Adobe ≫ Adobe Air Sdk Version <= 14.0.0.178
Adobe ≫ Adobe Air Sdk Version 13.0.0.83
Adobe ≫ Adobe Air Sdk Version 13.0.0.111
Adobe ≫ Adobe Air Sdk Version 14.0.0.110
Adobe ≫ Adobe Air Sdk Version 14.0.0.137
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.8% 0.923
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://helpx.adobe.com/security/products/flash-player/apsb14-21.html
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00016.html
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00021.html
http://secunia.com/advisories/61089
http://security.gentoo.org/glsa/glsa-201409-05.xml
http://www.securitytracker.com/id/1030822
http://www.securityfocus.com/bid/69703
https://exchange.xforce.ibmcloud.com/vulnerabilities/95822