9.3
CVE-2014-0569
- EPSS 89.33%
- Veröffentlicht 15.10.2014 10:55:06
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle psirt@adobe.com
- Teams Watchlist Login
- Unerledigt Login
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Flash Player Version <= 11.2.202.406
Adobe ≫ Flash Player SwEditionextended_support Version <= 13.0.0.244
Adobe ≫ Flash Player SwPlatformchrome Version <= 15.0.0.152
Adobe ≫ Flash Player SwPlatforminternet_explorer_10 Version <= 15.0.0.167
Adobe ≫ Flash Player SwPlatforminternet_explorer_11 Version <= 15.0.0.167
Adobe ≫ Flash Player Desktop Runtime Version <= 15.0.0.167
Adobe ≫ Air Desktop Runtime Version <= 15.0.0.249
Suse ≫ Linux Enterprise Desktop Version11 Updatesp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 89.33% | 0.995 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.