Lucene search

K
nessusTenable8294.PRM
HistoryJun 17, 2014 - 12:00 a.m.

Flash Player < 14.0.0.125 / 11.2.202.378 Multiple Vulnerabilities (APSB14-16)

2014-06-1700:00:00
Tenable
www.tenable.com
13

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%

Versions of Flash player earlier than 14.0.0.125 (or 11.2.202.378 on Linux) are unpatched for the following vulnerabilities:

  • Multiple unspecified errors that could be leveraged for cross-site scripting attacks. (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533)

  • Multiple unspecified errors that could permit unspecified security bypass attacks. (CVE-2014-0534, CVE-2014-0535)

  • Unspecified memory corruption issue that can be leveraged for arbitrary code execution (CVE-2014-0536)

Binary data 8294.prm
VendorProductVersionCPE
adobeflash_playercpe:/a:adobe:flash_player

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%