Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-0515

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.

Published

2014-04-29T10:37:03.733

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	adobe	flash_player	< 11.2.202.346	Yes
Operating System	linux	linux_kernel	*	No
Application	adobe	flash_player	< 11.7.700.279	Yes
Application	adobe	flash_player	< 13.0.0.206	Yes
Operating System	apple	mac_os_x	*	No
Operating System	microsoft	windows	-	No

References

http://helpx.adobe.com/security/products/flash-player/apsb14-13.html Patch, Vendor Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00001.html Mailing List, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2014-0447.html Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-201405-04.xml Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/67092 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1030155 Third Party Advisory, VDB Entry ([email protected])
http://helpx.adobe.com/security/products/flash-player/apsb14-13.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00001.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2014-0447.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-201405-04.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/67092 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1030155 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)