Lucene search
HistoryAug 12, 2014 - 10:55 p.m.
CVE-2014-0538
cve-2014-0538
adobe flash player
vulnerability
windows
os x
linux
adobe air
arbitrary code
nvd
7.4 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.028 Low
EPSS
Percentile
90.6%
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.
Affected configurations
Node
adobeflash_playerRange≤11.2.202.394
ORadobeflash_playerMatch11.2.202.223
ORadobeflash_playerMatch11.2.202.228
ORadobeflash_playerMatch11.2.202.233
ORadobeflash_playerMatch11.2.202.235
ORadobeflash_playerMatch11.2.202.236
ORadobeflash_playerMatch11.2.202.238
ORadobeflash_playerMatch11.2.202.243
ORadobeflash_playerMatch11.2.202.251
ORadobeflash_playerMatch11.2.202.258
ORadobeflash_playerMatch11.2.202.261
ORadobeflash_playerMatch11.2.202.262
ORadobeflash_playerMatch11.2.202.270
ORadobeflash_playerMatch11.2.202.273
ORadobeflash_playerMatch11.2.202.275
ORadobeflash_playerMatch11.2.202.280
ORadobeflash_playerMatch11.2.202.285
ORadobeflash_playerMatch11.2.202.291
ORadobeflash_playerMatch11.2.202.297
ORadobeflash_playerMatch11.2.202.310
ORadobeflash_playerMatch11.2.202.332
ORadobeflash_playerMatch11.2.202.335
ORadobeflash_playerMatch11.2.202.336
ORadobeflash_playerMatch11.2.202.341
ORadobeflash_playerMatch11.2.202.346
ORadobeflash_playerMatch11.2.202.350
ORadobeflash_playerMatch11.2.202.356
ORadobeflash_playerMatch11.2.202.359
ORadobeflash_playerMatch11.2.202.378
linuxlinux_kernel
Node
adobeadobe_airRange≤14.0.0.137
ORadobeadobe_airMatch13.0.0.83
ORadobeadobe_airMatch13.0.0.111
ORadobeadobe_airMatch14.0.0.110
googleandroid
Node
adobeadobe_airRange≤14.0.0.110
ORadobeadobe_airMatch13.0.0.83
ORadobeadobe_airMatch13.0.0.111
applemac_os_x
ORmicrosoftwindows
Node
adobeadobe_air_sdkRange≤14.0.0.137
ORadobeadobe_air_sdkMatch13.0.0.83
ORadobeadobe_air_sdkMatch13.0.0.111
ORadobeadobe_air_sdkMatch14.0.0.110
Node
adobeflash_playerRange≤13.0.0.231
ORadobeflash_playerMatch13.0.0.182
ORadobeflash_playerMatch13.0.0.201
ORadobeflash_playerMatch13.0.0.206
ORadobeflash_playerMatch13.0.0.214
ORadobeflash_playerMatch13.0.0.223
ORadobeflash_playerMatch14.0.0.125
ORadobeflash_playerMatch14.0.0.145
applemac_os_x
ORmicrosoftwindows
References
Related
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB14-18: CVE-2014-0538)
2014-08-19 00:00:00
prion
prion
Design/Logic Flaw
2014-08-12 22:55:00
nvd
nvd
CVE-2014-0538
2014-08-12 22:55:02
hackerone
hackerone
ubuntucve
ubuntucve
CVE-2014-0538
2014-08-12 00:00:00
cvelist
cvelist
CVE-2014-0538
2014-08-12 22:00:00
suse
suse
update for flash-player (critical)
2014-08-16 17:04:18
Security update for flash-player (important)
2014-08-19 01:04:46
update for flash-player (critical)
2014-08-14 13:04:21
nessus
nessus
MS KB2982794: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer
2014-08-12 00:00:00
Flash Player < 14.0.0.176 Multiple Vulnerabilities (APSB14-18)
2014-08-20 00:00:00
openSUSE Security Update : flash-player (openSUSE-SU-2014:1020-1)
2014-08-15 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201408-05
2015-09-29 00:00:00
Mageia: Security Advisory (MGASA-2014-0335)
2022-01-28 00:00:00
openSUSE: Security Advisory for update (openSUSE-SU-2014:1029-1)
2014-08-17 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2014-08-14 00:00:00
Chromium: Multiple vulnerabilities
2014-08-30 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2014-08-18 13:14:56
redhat
redhat
(RHSA-2014:1051) Critical: flash-plugin security update
2014-08-13 00:00:00
7.4 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.028 Low
EPSS
Percentile
90.6%
Related for CVE-2014-0538