NetSight
IP …
critical9.3Public exploit code

CVE-2014-0569

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR be…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 11.2.202.406
through 13.0.0.244
through 15.0.0.152
through 15.0.0.167
AdobeFlash Player Desktop Runtime
through 15.0.0.167
AdobeAir Desktop Runtime
through 15.0.0.249
AdobeAir Sdk
through 15.0.0.249
through 15.0.0.252
OpensuseEvergreen
Version 11.4
OpensuseOpensuse
Versions 12.3, 13.1
SuseLinux Enterprise Desktop
Version 11

Weakness classification

CWE-190

References