CVE-2014-0515
EXPLOITED IN THE WILD RANSOMWAREAdobe Flash Player Shader Buffer Overflow
Title source: metasploitExploitation Summary
CVE-2014-0515 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io), including in ransomware campaigns.
EIP tracks 2 public exploits from researchers including Metasploit, Unknown, juan vazquez, including a Metasploit module exploits/multi/browser/adobe_flash_pixel_bender_bof.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Adobe Flash Player's Shader class (CVE-2014-0515) by delivering a malicious SWF file via a crafted HTML page. It achieves remote code execution on vulnerable Flash versions (11.x, 12.x, or 13.x <= 13.0.0.182) on Windows systems.
Description
Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.
Exploits (2)
This Metasploit module exploits a buffer overflow in Adobe Flash Player's Shader class (CVE-2014-0515) by delivering a malicious SWF file via a crafted HTML page. It achieves remote code execution on vulnerable Flash versions (11.x, 12.x, or 13.x <= 13.0.0.182) on Windows systems.
This Metasploit module exploits a buffer overflow in Adobe Flash Player's Shader class (CVE-2014-0515) by delivering a malicious SWF file via a crafted HTML page. It achieves remote code execution on vulnerable Flash versions across Windows and Linux.