CVE-2014-0544

🗓️ 12 Aug 2014 22:00:00Reported by adobeType

Adobe Flash Player and AIR versions prior to 13.0.0.241, 14.x before 14.0.0.176, and Adobe AIR before 14.0.0.178 do not properly restrict memory address discovery, allowing attackers to bypass ASLR protection

Reporter	Title	Published	Views	Family All 49
Tenable Nessus	Flash Player < 14.0.0.176 Multiple Vulnerabilities (APSB14-18)	20 Aug 201400:00	–	nessus
Tenable Nessus	Adobe AIR < 14.0.0.178 Multiple Vulnerabilities (APSB14-18)	20 Aug 201400:00	–	nessus
Tenable Nessus	Adobe AIR <= AIR 14.0.0.110 Multiple Vulnerabilities (APSB14-18)	12 Aug 201400:00	–	nessus
Tenable Nessus	Flash Player <= 14.0.0.145 Multiple Vulnerabilities (APSB14-18)	12 Aug 201400:00	–	nessus
Tenable Nessus	GLSA-201408-05 : Adobe Flash Player: Multiple vulnerabilities	15 Aug 201400:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 14.0.0.110 Multiple Vulnerabilities (APSB14-18)	12 Aug 201400:00	–	nessus
Tenable Nessus	Flash Player for Mac <= 14.0.0.145 Multiple Vulnerabilities (APSB14-18)	12 Aug 201400:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-SU-2014:1020-1)	15 Aug 201400:00	–	nessus
Tenable Nessus	RHEL 5 / 6 : flash-plugin (RHSA-2014:1051)	14 Aug 201400:00	–	nessus
Tenable Nessus	MS KB2982794: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	12 Aug 201400:00	–	nessus

Source	Link
secunia	www.secunia.com/advisories/60710
secunia	www.secunia.com/advisories/60732
security	www.security.gentoo.org/glsa/glsa-201408-05.xml
securitytracker	www.securitytracker.com/id/1030712
helpx	www.helpx.adobe.com/security/products/flash-player/apsb14-18.html

04 Jan 2017 20:57Current

6.2Medium risk

Vulners AI Score6.2

EPSS0.03978

adobe flash player windows os x linux adobe air adobe air sdk memory address aslr protection mechanism cve-2014-0544