Lucene search

K
nessusTenable8382.PRM
HistorySep 10, 2014 - 12:00 a.m.

Flash Player < 14.0.0.180 (inferred) Multiple Vulnerabilities (APSB14-21)

2014-09-1000:00:00
Tenable
www.tenable.com
14

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%

Versions of Adobe Flash Player prior or equal to 14.0.0.179 are outdated and thus unpatched for the following vulnerabilities :

  • Unspecified memory corruption issues exist that allow arbitrary code execution (CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0555).
  • An unspecified error exists that allows cross-origin policy violations (CVE-2014-0548).
  • A use-after-free error exists that allows arbitrary code execution (CVE-2014-0553).
  • An unspecified error exists that allows an unspecified security bypass (CVE-2014-0554).
  • Unspecified errors exist that allow memory leaks leading to easier defeat of memory address randomization (CVE-2014-0557).
  • Heap-based buffer overflow errors exist that allow arbitrary code execution (CVE-2014-0556, CVE-2014-0559).
Binary data 8382.prm
VendorProductVersionCPE
adobeflash_playercpe:/a:adobe:flash_player

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%