CVE-2014-0499

🗓️ 21 Feb 2014 05:00:07Reported by adobeType

CVE-2014-0499 Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors

Reporter	Title	Published	Views	Family All 31
UbuntuCve	CVE-2014-0499	21 Feb 201400:00	–	ubuntucve
Check Point Advisories	Adobe Flash Player Memory Corruption (APSB14-07: CVE-2014-0499)	4 Mar 201400:00	–	checkpoint_advisories
Prion	Design/Logic Flaw	21 Feb 201405:07	–	prion
Cvelist	CVE-2014-0499	21 Feb 201402:00	–	cvelist
NVD	CVE-2014-0499	21 Feb 201405:07	–	nvd
seebug.org	Adobe Flash Player及AIR信息泄露漏洞(CVE-2014-0499)	21 Feb 201400:00	–	seebug
Tenable Nessus	SuSE 11.3 Security Update : flash-player (SAT Patch Number 8922)	26 Feb 201400:00	–	nessus
Tenable Nessus	Flash Player for Mac <= 11.7.700.261 / 12.0.0.44 Multiple Vulnerabilities (APSB14-07) (Mac OS X)	20 Feb 201400:00	–	nessus
Tenable Nessus	Flash Player <= 11.7.700.261 / 12.0.0.44 Multiple Vulnerabilities (APSB14-07)	20 Feb 201400:00	–	nessus
Tenable Nessus	Flash Player < 11.7.700.269 / 12.0.0.70 Multiple Vulnerabilities (APSB14-07)	10 Jul 201500:00	–	nessus

Nvd

Node

adobe flash_playerRange11.0–11.7.700.269

adobe flash_playerRange11.8–11.8.800.175

adobe flash_playerRange11.9–12.0.0.70

AND

apple mac_os_x

microsoft windowsMatch-

Node

adobe adobe_air_sdkRange<4.0.0.1628

Node

adobe flash_playerRange11.0–11.2.202.341

AND

linux linux_kernel

Node

adobe adobe_airRange<4.0.0.1628

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2014-0196.html
helpx	www.helpx.adobe.com/security/products/flash-player/apsb14-07.html
security	www.security.gentoo.org/glsa/glsa-201405-04.xml
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2014 05:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS27.8

EPSS0.004

CWE-264