CVE-2014-0569

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html	Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1648.html	Broken Link
http://secunia.com/advisories/61980	Third Party Advisory
http://www.securityfocus.com/bid/70441	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031019	Third Party Advisory VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-14-365/	Third Party Advisory VDB Entry
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html	Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1648.html	Broken Link
http://secunia.com/advisories/61980	Third Party Advisory
http://www.securityfocus.com/bid/70441	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031019	Third Party Advisory VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-14-365/	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:a:adobe:flash_player:*:*:*:*:extended_support:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

Configuration 3 (hide)

AND

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

Configuration 4 (hide)

AND

OR	cpe:2.3:a:adobe:flash_player::::::internet_explorer_10::*
	cpe:2.3:a:adobe:flash_player::::::internet_explorer_11::*

OR	cpe:2.3:o:microsoft:windows_8:-:::::::*
	cpe:2.3:o:microsoft:windows_8.1:-:::::::*

Configuration 5 (hide)

AND

cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

Configuration 6 (hide)

AND

cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

Configuration 7 (hide)

AND

cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:iphone_os:-:::::::*
	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

Configuration 8 (hide)

AND

cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Configuration 9 (hide)

OR	cpe:2.3:o:opensuse:evergreen:11.4:::::::*
	cpe:2.3:o:opensuse:opensuse:12.3:::::::*
	cpe:2.3:o:opensuse:opensuse:13.1:::::::*
	cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3::::::

History

21 Nov 2024, 02:02

Type	Values Removed	Values Added
References	~~() http://helpx.adobe.com/security/products/flash-player/apsb14-22.html - Patch, Vendor Advisory~~	() http://helpx.adobe.com/security/products/flash-player/apsb14-22.html - Patch, Vendor Advisory
References	~~() http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html - Mailing List, Third Party Advisory~~	() http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html - Mailing List, Third Party Advisory
References	~~() http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - Mailing List, Third Party Advisory~~	() http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - Mailing List, Third Party Advisory
References	~~() http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html - Third Party Advisory~~	() http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html - Third Party Advisory
References	~~() http://rhn.redhat.com/errata/RHSA-2014-1648.html - Broken Link~~	() http://rhn.redhat.com/errata/RHSA-2014-1648.html - Broken Link
References	~~() http://secunia.com/advisories/61980 - Third Party Advisory~~	() http://secunia.com/advisories/61980 - Third Party Advisory
References	~~() http://www.securityfocus.com/bid/70441 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/70441 - Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1031019 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1031019 - Third Party Advisory, VDB Entry
References	~~() http://www.zerodayinitiative.com/advisories/ZDI-14-365/ - Third Party Advisory, VDB Entry~~	() http://www.zerodayinitiative.com/advisories/ZDI-14-365/ - Third Party Advisory, VDB Entry

Information

Published : 2014-10-15 10:55

Updated : 2024-11-21 02:02

NVD link : CVE-2014-0569

Mitre link : CVE-2014-0569

CVE.ORG link : CVE-2014-0569

JSON object : View

Products Affected

apple

macos
iphone_os

opensuse

evergreen
opensuse

microsoft

windows_8.1
windows
windows_8

suse

linux_enterprise_desktop

linux

linux_kernel

adobe

flash_player
flash_player_desktop_runtime
air_sdk
air_desktop_runtime

google

android

CWE

CWE-190

Integer Overflow or Wraparound

9.3 /10