CVE-2014-0553

2014-09-1001:55:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2014-0553

adobe flash player

use-after-free

vulnerability

nvd

security issue

8.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.028 Low

EPSS

Percentile

90.6%

JSON

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.

CPENameOperatorVersion
adobe:adobe_air_sdkadobe adobe air sdkeq14.0.0.137
adobe:adobe_air_sdkadobe adobe air sdkeq13.0.0.111
adobe:adobe_air_sdkadobe adobe air sdkeq13.0.0.83
adobe:adobe_air_sdkadobe adobe air sdkle14.0.0.178
adobe:adobe_air_sdkadobe adobe air sdkeq14.0.0.110
opensuse:opensuseopensuseeq12.3
suse:suse_linux_enterprise_desktopsuse suse linux enterprise desktopeq11.0
opensuse:opensuseopensuseeq11.4
opensuse:opensuseopensuseeq13.1
adobe:flash_playeradobe flash playerle13.0.0.241

CPE	Name	Operator	Version
adobe:adobe_air_sdk	adobe adobe air sdk	eq	14.0.0.137
adobe:adobe_air_sdk	adobe adobe air sdk	eq	13.0.0.111
adobe:adobe_air_sdk	adobe adobe air sdk	eq	13.0.0.83
adobe:adobe_air_sdk	adobe adobe air sdk	le	14.0.0.178
adobe:adobe_air_sdk	adobe adobe air sdk	eq	14.0.0.110
opensuse:opensuse	opensuse	eq	12.3
suse:suse_linux_enterprise_desktop	suse suse linux enterprise desktop	eq	11.0
opensuse:opensuse	opensuse	eq	11.4
opensuse:opensuse	opensuse	eq	13.1
adobe:flash_player	adobe flash player	le	13.0.0.241