CVE-2014-0569

EPSS 91.58%
Veröffentlicht 15.10.2014 10:55:06
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

NVD 13 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Flash Player Version <= 11.2.202.406

Linux ≫ Linux Kernel Version -

Adobe ≫ Flash Player SwEdition extended_support Version <= 13.0.0.244

Apple ≫ macOS Version -
Microsoft ≫ Windows Version -

Adobe ≫ Flash Player SwPlatform chrome Version <= 15.0.0.152

   Apple ≫ macOS Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -

Adobe ≫ Flash Player SwPlatform internet_explorer_10 Version <= 15.0.0.167

Microsoft ≫ Windows 8 Version -
Microsoft ≫ Windows 8.1 Version -

Adobe ≫ Flash Player SwPlatform internet_explorer_11 Version <= 15.0.0.167

Microsoft ≫ Windows 8 Version -
Microsoft ≫ Windows 8.1 Version -

Adobe ≫ Flash Player Desktop Runtime Version <= 15.0.0.167

Apple ≫ macOS Version -
Microsoft ≫ Windows Version -

Adobe ≫ Air Desktop Runtime Version <= 15.0.0.249

Apple ≫ macOS Version -
Microsoft ≫ Windows Version -

Adobe ≫ Air Sdk Version <= 15.0.0.249

   Apple ≫ iPhone OS Version -
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -

Adobe ≫ Air Sdk Version <= 15.0.0.252

Google ≫ Android Version -

Opensuse ≫ Evergreen Version 11.4

Opensuse ≫ Opensuse Version 12.3

Opensuse ≫ Opensuse Version 13.1

Suse ≫ Linux Enterprise Desktop Version 11 Update sp3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	91.58%	0.998

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://helpx.adobe.com/security/products/flash-player/apsb14-22.html

Patch

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1648.html

Broken Link

http://secunia.com/advisories/61980

Third Party Advisory

http://www.securitytracker.com/id/1031019

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/70441

Third Party Advisory

VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-14-365/

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2014-0569

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0569

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0569

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2014-0569