Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-8439

Опубликовано: 25 нояб. 2014
Источник: redhat
CVSS2: 6.8
EPSS Средний

Описание

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=1168057flash-plugin: hardening against a code execution flaw (APSB14-26)

EPSS

Процентиль: 96%
0.27067
Средний

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 11 лет назад

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

CVSS3: 8.8
nvd
около 11 лет назад

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

CVSS3: 8.8
github
больше 3 лет назад

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

CVSS3: 9.8
fstec
больше 11 лет назад

Уязвимость программных платформ Adobe Flash Player, Adobe Integrated Runtime (AIR), Adobe AIR SDK и Adobe AIR SDK & Compiler, связанная с выходом операции за границы буфера, позволяющая нарушителю выполнить произвольный код или вызывать отказ в обслуживании

suse-cvrf
около 11 лет назад

Security update for flash-player

EPSS

Процентиль: 96%
0.27067
Средний

6.8 Medium

CVSS2