CVE-2014-0582

Adobe Flash Player 13.0-13.0.0.251 and 14.x-15.x < 15.0.0.223 - Remote Code Execution

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71039
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html

Scores

EPSS 0.1145
EPSS Percentile 95.5%

Details

CWE
CWE-119
Status published
Products (4)
adobe/air < 15.0.0.356
adobe/air_sdk < 15.0.0.356
adobe/air_sdk_\&_compiler < 15.0.0.356
adobe/flash_player 13.0 - 13.0.0.252
Published Nov 11, 2014
Tracked Since Feb 18, 2026