PT-2014-3662 · Adobe +3 · Flash Player +3

🗓️ 05 Feb 2014 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Remote code execution via integer underflow in Flash Player; affected versions: before 11.7.700.261, 11.8.x–12.0.x before 12.0.0.44, and before 11.2.202.336 on Linux.

Reporter	Title	Published	Views	Family All 63
0day.today	Adobe Flash Player Integer Underflow Remote Code Execution Exploit	6 May 201400:00	–	zdt
0day.today	Integer underflow in Adobe Flash Player Exploit	8 May 201400:00	–	zdt
Tenable Nessus	Google Chrome < 32.0.1700.107 RCE	11 Feb 201400:00	–	nessus
Tenable Nessus	Flash Player < 12.0.0.44 (inferred) RCE (APSB14-04)	11 Feb 201400:00	–	nessus
Tenable Nessus	Flash Player <= 11.7.700.260 / 12.0.0.43 Remote Code Execution (APSB14-04)	10 Feb 201400:00	–	nessus
Tenable Nessus	Flash Player <= 11.7.700.260 / 12.0.0.43 Unspecified Remote Code Execution (APSB14-04)	4 Feb 201400:00	–	nessus
Tenable Nessus	FreeBSD : linux-flashplugin -- multiple vulnerabilities (b7a7576d-8e0a-11e3-9976-9c4e36909cc0)	5 Feb 201400:00	–	nessus
Tenable Nessus	GLSA-201402-06 : Adobe Flash Player: Multiple vulnerabilities	7 Feb 201400:00	–	nessus
Tenable Nessus	Flash Player for Mac <= 11.7.700.260 / 12.0.0.43 Unspecified Remote Code Execution (APSB14-04)	4 Feb 201400:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-SU-2014:0197-1)	13 Jun 201400:00	–	nessus

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_avm2.rb
exploit-db	www.exploit-db.com/exploits/33212
exploit-db	www.exploit-db.com/exploits/33212
advisories	www.advisories.mageia.org/MGASA-2014-0035.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-0497
adobe	www.adobe.com/products/flashplayer/end-of-life-alternative.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html
errata	www.errata.altlinux.org/ALT-PU-2014-1155
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html

20 Dec 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 210

CVSS 3.18.8 - 9.8

EPSS0.93156

SSVC