Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable8567.PRM
HistoryNov 12, 2014 - 12:00 a.m.

Adobe AIR < 15.0.0.356 Multiple Vulnerabilities (APSB14-24)

2014-11-1200:00:00
Tenable
www.tenable.com
14

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Versions of Adobe AIR earlier than 15.0.0.356 are unpatched for the following vulnerabilities :

  • Multiple memory corruption vulnerabilities allow an attacker to execute arbitrary code. (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)
  • Multiple use-after-free vulnerabilities could result in arbitrary code execution. (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438, CVE-2014-0574)
  • Multiple type confusion vulnerabilities could result in arbitrary code execution. (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)
  • Multiple heap-based buffer overflow vulnerabilities can be exploited to execute arbitrary code or elevate privileges. (CVE-2014-0583, CVE-2014-0582, CVE-2014-0589)
  • A permission issue that allows a remote attacker to gain elevated privileges. (CVE-2014-8442)
  • An information disclosure vulnerability can be exploited to disclose secret session tokens. (CVE-2014-8437)
Binary data 8567.prm
VendorProductVersionCPE
adobeaircpe:/a:adobe:air

References

Related

nessus 18
suse 4
openvas 9
archlinux 1
redhat 1
gentoo 1
mageia 1
cve 18
ubuntucve 18
prion 18
cvelist 18
nvd 18
hackerone 2
symantec 3
checkpoint_advisories 15
packetstorm 1
threatpost 6
zdt 1
metasploit 1
exploitdb 1
thn 1
freebsd 1
chrome 1
nessus
nessus
openSUSE Security Update : flash-player (openSUSE-SU-2014:1444-1)
2014-11-19 00:00:00
Adobe AIR <= 15.0.0.293 Multiple Vulnerabilities (APSB14-24)
2014-11-12 00:00:00
Flash Player < 15.0.0.223 Multiple Vulnerabilities (APSB14-24)
2014-11-12 00:00:00
suse
suse
Security update for flash-player (important)
2014-11-18 01:05:27
Security update for flash-player (important)
2014-11-18 12:04:40
Security update for Adobe Flash Player (important)
2015-04-16 13:04:48
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities (APSB14-24) - Mac OS X
2014-11-14 00:00:00
Adobe Flash Player Multiple Vulnerabilities (APSB14-24) - Linux
2014-11-14 00:00:00
Adobe AIR Multiple Vulnerabilities (APSB14-24) - Windows
2014-11-14 00:00:00
archlinux
archlinux
flashplugin: remote code execution
2014-11-13 00:00:00
redhat
redhat
(RHSA-2014:1852) Critical: flash-plugin security update
2014-11-13 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2014-11-21 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix multiple security vulnerabilities
2014-11-14 04:27:45
cve
cve
CVE-2014-0585
2014-11-11 23:55:02
CVE-2014-0584
2014-11-11 23:55:02
CVE-2014-0590
2014-11-11 23:55:02
ubuntucve
ubuntucve
CVE-2014-0590
2014-11-11 00:00:00
CVE-2014-0577
2014-11-11 00:00:00
CVE-2014-0586
2014-11-11 00:00:00
prion
prion
Type confusion
2014-11-11 23:55:00
Type confusion
2014-11-11 23:55:00
Type confusion
2014-11-11 23:55:00
cvelist
cvelist
CVE-2014-0590
2014-11-11 23:00:00
CVE-2014-0586
2014-11-11 23:00:00
CVE-2014-0584
2014-11-11 23:00:00
nvd
nvd
CVE-2014-0584
2014-11-11 23:55:02
CVE-2014-0590
2014-11-11 23:55:02
CVE-2014-0585
2014-11-11 23:55:02
hackerone
hackerone
Internet Bug Bounty: Adobe Flash Player MP4 Use-After-Free Vulnerability
2014-11-17 06:20:07
Internet Bug Bounty: Race condition in Flash workers may cause an exploitabl​e double free
2014-11-24 08:10:24
symantec
symantec
Adobe Flash Player and AIR CVE-2014-8440 Unspecified Memory Corruption Vulnerability
2014-11-11 00:00:00
Adobe Flash Player and AIR CVE-2014-0588 Use After Free Remote Code Execution Vulnerability
2014-11-11 00:00:00
Adobe Flash Player and AIR CVE-2014-0577 Type Confusion Remote Code Execution Vulnerability
2014-11-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB14-24: CVE-2014-8438)
2015-01-25 00:00:00
Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-8440)
2014-12-10 00:00:00
Adobe Flash Player Heap Buffer Overflow (APSB14-24: CVE-2014-0589)
2015-02-03 00:00:00
packetstorm
packetstorm
Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory
2015-05-01 00:00:00
threatpost
threatpost
Angler Exploit Kit Adds New Flash Exploit
2014-11-20 08:02:52
Citadel Variant Targets Password Managers
2014-11-19 14:54:34
Exploit for Flash Zero Day Appears in Angler Exploit Kit
2015-01-21 11:53:31
zdt
zdt
Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory Exploit
2015-05-01 00:00:00
metasploit
metasploit
Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory
2015-04-29 22:52:04
exploitdb
exploitdb
Adobe Flash Player - UncompressViaZlibVariant Uninitialized Memory (Metasploit)
2015-05-01 00:00:00
thn
thn
Adobe Releases Emergency Flash Player Update to Address Critical Vulnerability
2014-11-25 21:27:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2014-11-18 00:00:00
chrome
chrome
Stable Channel Update
2014-11-18 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for 8567.PRM
nessus18suse4openvas9archlinux1redhat1gentoo1mageia1cve18ubuntucve18prion18cvelist18nvd18hackerone2symantec3checkpoint_advisories15packetstorm1threatpost6zdt1metasploit1exploitdb1thn1freebsd1chrome1