PT-2014-3667 · Adobe+3 · Air Sdk & Compiler+6
CVE-2014-0502
·
Publicado
2014-02-21
·
Atualizado
2024-12-20
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions prior to 11.7.700.269
Adobe Flash Player versions 11.8.x through 12.0.x before 12.0.0.70
Adobe Flash Player version prior to 11.2.202.341 on Linux
Adobe AIR version prior to 4.0.0.1628 on Android
Adobe AIR SDK version prior to 4.0.0.1628
Adobe AIR SDK & Compiler version prior to 4.0.0.1628
Description
The issue allows remote attackers to execute arbitrary code via unspecified vectors. It was exploited in the wild in February 2014.
Recommendations
For Adobe Flash Player versions prior to 11.7.700.269, update to version 11.7.700.269 or later.
For Adobe Flash Player versions 11.8.x through 12.0.x, update to version 12.0.0.70 or later.
For Adobe Flash Player version prior to 11.2.202.341 on Linux, update to version 11.2.202.341 or later.
For Adobe AIR version prior to 4.0.0.1628 on Android, update to version 4.0.0.1628 or later.
For Adobe AIR SDK version prior to 4.0.0.1628, update to version 4.0.0.1628 or later.
For Adobe AIR SDK & Compiler version prior to 4.0.0.1628, update to version 4.0.0.1628 or later.
Exploit
Correção
RCE
Double Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse