CVE-2014-0558

2014-10-1510:55:00

CWE-94

[email protected]

web.nvd.nist.gov

cve

adobe flash player

adobe air

denial of service

memory corruption

nvd

cve-2014-0558

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.052 Low

EPSS

Percentile

93.0%

JSON

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerle13.0.0.244
adobe:flash_playeradobe flash playereq13.0.0.182
adobe:flash_playeradobe flash playereq13.0.0.201
adobe:flash_playeradobe flash playereq13.0.0.206
adobe:flash_playeradobe flash playereq13.0.0.214
adobe:flash_playeradobe flash playereq13.0.0.223
adobe:flash_playeradobe flash playereq13.0.0.231
adobe:flash_playeradobe flash playereq13.0.0.241
adobe:flash_playeradobe flash playereq14.0.0.125
adobe:flash_playeradobe flash playereq14.0.0.145

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	le	13.0.0.244
adobe:flash_player	adobe flash player	eq	13.0.0.182
adobe:flash_player	adobe flash player	eq	13.0.0.201
adobe:flash_player	adobe flash player	eq	13.0.0.206
adobe:flash_player	adobe flash player	eq	13.0.0.214
adobe:flash_player	adobe flash player	eq	13.0.0.223
adobe:flash_player	adobe flash player	eq	13.0.0.231
adobe:flash_player	adobe flash player	eq	13.0.0.241
adobe:flash_player	adobe flash player	eq	14.0.0.125
adobe:flash_player	adobe flash player	eq	14.0.0.145