CVE-2014-8439
HIGH
8,8
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,2707
Percentile
1,0th
Updated
EPSS Score Trend (Last 91 Days)
119
Improper Restriction of Operations within the Bounds of a Memory Buffer
StableCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Modify Memory
Read Memory
Dos: Crash, Exit, Or Restart
Dos: Resource Consumption (Cpu)
Dos: Resource Consumption (Memory)
Applicable Platforms
Languages:
Assembly, C, C++, Memory-Unsafe
416
Use After Free
StableCommon Consequences
Security Scopes Affected:
Integrity
Availability
Confidentiality
Potential Impacts:
Modify Memory
Dos: Crash, Exit, Or Restart
Execute Unauthorized Code Or Commands
Applicable Platforms
Languages:
C, C++, Memory-Unsafe
Application
Flash Player by Adobe
Version Range Affected
To
11.2.202.418
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Air by Adobe
Version Range Affected
To
15.0.0.292
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Flash Player by Adobe
Version Range Affected
To
13.0.0.252
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Flash Player by Adobe
Version Range Affected
To
15.0.0.223
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Air Sdk \& Compiler by Adobe
Version Range Affected
To
15.0.0.302
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Air Sdk by Adobe
Version Range Affected
To
15.0.0.301
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014…
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html
http://helpx.adobe.com/security/products/flash-player/apsb14-26.html
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html
http://rhn.redhat.com/errata/RHSA-2014-1915.html
http://secunia.com/advisories/60217
https://exchange.xforce.ibmcloud.com/vulnerabilities/98932
https://www.f-secure.com/weblog/archives/00002768.html
http://www.securityfocus.com/bid/71289
http://www.securitytracker.com/id/1031259
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html
http://helpx.adobe.com/security/products/flash-player/apsb14-26.html
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html
http://rhn.redhat.com/errata/RHSA-2014-1915.html
http://secunia.com/advisories/60217
https://exchange.xforce.ibmcloud.com/vulnerabilities/98932
https://www.f-secure.com/weblog/archives/00002768.html
http://www.securityfocus.com/bid/71289
http://www.securitytracker.com/id/1031259