CVE-2014-0569
EXPLOITED RANSOMWAREAdobe Flash Player < 13.0.0.250, 14.x-15.x < 15.0.0.189, < 11.2.202.411 - Remote Code Execution via Integer Overflow
Title source: llmExploitation Summary
CVE-2014-0569 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.
EIP tracks 2 public exploits from researchers including Metasploit, bilou, juan vazquez, including a Metasploit module exploits/windows/browser/adobe_flash_casi32_int_overflow.
AI-analyzed exploit summary This Metasploit module exploits an integer overflow in Adobe Flash Player's casi32 method by delivering a malicious SWF file via a browser exploit server. It achieves remote code execution by embedding a PowerShell payload in the FlashVars parameter.
Description
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.
Exploits (2)
This Metasploit module exploits an integer overflow in Adobe Flash Player's casi32 method by delivering a malicious SWF file via a browser exploit server. It achieves remote code execution by embedding a PowerShell payload in the FlashVars parameter.
This Metasploit module exploits an integer overflow in Adobe Flash Player's casi32 method by sending a malicious SWF file to trigger remote code execution. It targets Windows 7/8.1 with Flash versions up to 15.0.0.167 via browser exploitation.