CVE-2014-0574

Adobe Flash Player 13.0-13.0.0.251 and 14.x-15.x < 15.0.0.223 - Remote Code Execution via Double Free

Title source: llm
STIX 2.1

Description

Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory x_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=423703
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html

Scores

EPSS 0.0826
EPSS Percentile 94.2%

Details

CWE
CWE-94
Status published
Products (4)
adobe/air < 15.0.0.356
adobe/air_sdk < 15.0.0.356
adobe/air_sdk_\&_compiler < 15.0.0.356
adobe/flash_player 13.0 - 13.0.0.252
Published Nov 11, 2014
Tracked Since Feb 18, 2026