CVE-2014-0564

2014-10-1510:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-0564

adobe flash player

memory corruption

cve-2014-0558

nvd

vulnerability

security

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

84.0%

JSON

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerle11.2.202.406
adobe:flash_playeradobe flash playerle13.0.0.244
adobe:flash_playeradobe flash playerle15.0.0.152
adobe:flash_playeradobe flash playerle15.0.0.167
adobe:flash_player_desktop_runtimeadobe flash player desktop runtimele15.0.0.167
adobe:air_desktop_runtimeadobe air desktop runtimele15.0.0.249
adobe:air_sdkadobe air sdkle15.0.0.249
adobe:air_sdkadobe air sdkle15.0.0.252
suse:linux_enterprise_desktopsuse linux enterprise desktopeq11
opensuse:evergreenopensuse evergreeneq11.4

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	le	11.2.202.406
adobe:flash_player	adobe flash player	le	13.0.0.244
adobe:flash_player	adobe flash player	le	15.0.0.152
adobe:flash_player	adobe flash player	le	15.0.0.167
adobe:flash_player_desktop_runtime	adobe flash player desktop runtime	le	15.0.0.167
adobe:air_desktop_runtime	adobe air desktop runtime	le	15.0.0.249
adobe:air_sdk	adobe air sdk	le	15.0.0.249
adobe:air_sdk	adobe air sdk	le	15.0.0.252
suse:linux_enterprise_desktop	suse linux enterprise desktop	eq	11
opensuse:evergreen	opensuse evergreen	eq	11.4