CVE-2014-8439
7.5 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.829 High
EPSS
Percentile
98.4%
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
References
helpx.adobe.com/security/products/flash-player/apsb14-22.html
helpx.adobe.com/security/products/flash-player/apsb14-26.html
lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html
lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html
lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html
rhn.redhat.com/errata/RHSA-2014-1915.html
secunia.com/advisories/60217
www.securityfocus.com/bid/71289
www.securitytracker.com/id/1031259
exchange.xforce.ibmcloud.com/vulnerabilities/98932
www.f-secure.com/weblog/archives/00002768.html
Social References
More
Related
7.5 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.829 High
EPSS
Percentile
98.4%