Lucene search

K
nessusTenable8261.PRM
HistoryMay 21, 2014 - 12:00 a.m.

Adobe AIR < 13.0.0.111 Multiple Vulnerabilities (APSB14-14)

2014-05-2100:00:00
Tenable
www.tenable.com
7

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.595 Medium

EPSS

Percentile

97.8%

Versions of Adobe AIR earlier than 13.0.0.111 are unpatched for the following vulnerabilities :

  • An overflow condition exists that is triggered as user-supplied input is not properly validated when handling display objects. This may allow a context-dependent attacker to cause a heap-based buffer overflow, allowing the execution of arbitrary code. (CVE-2014-0510)
  • An unspecified vulnerability exists that could be used to bypass the same origin policy. (CVE-2014-0516)
  • Multiple, unspecified security bypass vulnerabilities exist. (CVE-2014-0517, CVE-2014-0518, CVE-2014-0519, CVE-2014-0520)
Binary data 8261.prm
VendorProductVersionCPE
adobeaircpe:/a:adobe:air

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.595 Medium

EPSS

Percentile

97.8%