critical10.0
CVE-2014-0538
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR…
Impact
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 11.2.202.394 Versions 11.2.202.223, 11.2.202.228, 11.2.202.233, 11.2.202.235, 11.2.202.236 |
| Adobe | Adobe Air | through 14.0.0.137 through 14.0.0.110 Versions 13.0.0.83, 13.0.0.111, 14.0.0.110 |
| Adobe | Adobe Air Sdk | through 14.0.0.137 Versions 13.0.0.83, 13.0.0.111, 14.0.0.110 |
References
- NVD record
- CVE.org record
- http://helpx.adobe.com/security/products/flash-player/apsb14-18.html
- http://secunia.com/advisories/58593
- http://secunia.com/advisories/59904
- http://secunia.com/advisories/60710
- http://secunia.com/advisories/60732
- http://security.gentoo.org/glsa/glsa-201408-05.xml
- http://security.gentoo.org/glsa/glsa-201408-16.xml
- http://www.securitytracker.com/id/1030712
- http://helpx.adobe.com/security/products/flash-player/apsb14-18.html
- http://secunia.com/advisories/58593
- http://secunia.com/advisories/59904
- http://secunia.com/advisories/60710
- http://secunia.com/advisories/60732
- http://security.gentoo.org/glsa/glsa-201408-05.xml
- http://security.gentoo.org/glsa/glsa-201408-16.xml
- http://www.securitytracker.com/id/1030712