CVEvulnerability
CVE-2014-0569
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-10-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-190
Description
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• adobe flash player (<= 11.2.202.406)
• adobe flash player (<= 13.0.0.244)
• adobe flash player (<= 15.0.0.152)
• adobe flash player (<= 15.0.0.167)
• adobe flash player desktop runtime (<= 15.0.0.167)
• adobe air desktop runtime (<= 15.0.0.249)
• adobe air sdk (<= 15.0.0.249)
• adobe air sdk (<= 15.0.0.252)
• opensuse evergreen 11.4
• opensuse opensuse 12.3
• opensuse opensuse 13.1
• suse linux enterprise desktop 11
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://helpx.adobe.com/security/products/flash-player/apsb14-22.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1648.html Broken Link
- http://secunia.com/advisories/61980 Third Party Advisory
- http://www.securityfocus.com/bid/70441 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031019 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-14-365/ Third Party Advisory, VDB Entry
- http://helpx.adobe.com/security/products/flash-player/apsb14-22.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1648.html Broken Link
- http://secunia.com/advisories/61980 Third Party Advisory
- http://www.securityfocus.com/bid/70441 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031019 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-14-365/ Third Party Advisory, VDB Entry