CVE-2014-0556
EXPLOITED RANSOMWAREAdobe Flash Player < 13.0.0.244 and 14.x-15.x < 15.0.0.152 - Remote Code Execution via Heap-Based Buffer Overflow
Title source: llmExploitation Summary
CVE-2014-0556 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.
EIP tracks 2 public exploits from researchers including Metasploit, Chris Evans, Nicolas Joly, hdarwin, juan vazquez, including a Metasploit module exploits/windows/browser/adobe_flash_copy_pixels_to_byte_array.
AI-analyzed exploit summary This Metasploit module exploits an integer overflow in Adobe Flash Player's copyPixelsToByteArray method to achieve remote code execution. It delivers a malicious SWF file via a browser exploit server, targeting Windows 7 SP1 with IE 8-11 and Flash versions up to 14.0.0.176.
Description
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.
Exploits (2)
This Metasploit module exploits an integer overflow in Adobe Flash Player's copyPixelsToByteArray method to achieve remote code execution. It delivers a malicious SWF file via a browser exploit server, targeting Windows 7 SP1 with IE 8-11 and Flash versions up to 14.0.0.176.
This Metasploit module exploits an integer overflow in Adobe Flash Player's `copyPixelsToByteArray` method, allowing arbitrary code execution via a crafted SWF file. It targets Windows systems with Flash versions up to 14.0.0.179.