CVE-2014-0586

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an...

CVE-2014-0584

CVE-2014-0584 is a type-confusion vulnerability in Adobe Flash Player/SWF handling that enables remote code execution. Affected products include Flash Player on Windows, macOS, Linux (before 11.2.202.418) and Adobe AIR SDK/SDK & Compiler (before 15.0.0.356); OpenSUSE and other advisories referenc...

CVE-2014-0576

CVE-2014-0576 is a memory‑corruption vulnerability in Adobe Flash Player triggered by parsing a specially crafted SWF file, potentially allowing remote arbitrary code execution. Affected products/versions include Flash Player on Windows, OS X, and Linux (per the description), plus related AIR com...

CVE-2014-0582

CVE-2014-0582 is a heap-based buffer overflow in Adobe Flash Player that could lead to remote code execution. The public advisories and Nessus/OpenSUSE summaries reference Flash Player updates to version 11.2.202.418, which fixes multiple memory corruption, type confusion, and heap-related vulner...

CVE-2014-8441

CVE-2014-8441 is a memory corruption vulnerability in Adobe Flash Player that allowed remote code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/macOS, and before 11.2.202.418 on Linux, plus Ad...

CVE-2014-0573

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute...

CVE-2014-0573

CVE-2014-0573 is a use-after-free in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected products include Windows/OS X Flash Player before 13.0.0.252 and 14.x before 15.0.0.223, Linux Flash Player before 11.2.202.418, and Adobe AIR before 15.0.0.356 (and AIR ...

CVE-2014-0586

Adobe Flash Player vulnerability CVE-2014-0586 is a remote-code-execution type-confusion in the handling of a malformed SWF, affecting Windows/macOS Flash before 13.0.0.252, 14.x/15.x before 15.0.0.223, and Linux Flash before 11.2.202.418; Adobe AIR components are affected as well. Multiple conne...

CVE-2014-0583

CVE-2014-0583 affects Adobe Flash Player via a heap buffer overflow in the Flash parsing path that can escalate from low to medium integrity. The vulnerability is identified in Flash Player with fixed versions around 11.2.202.418 (and related advisories), and multiple open-source advisories list ...

CVE-2014-8440

CVE-2014-8440 is a memory‑corruption vulnerability in Adobe Flash Player’s ByteArray::UncompressViaZlibVariant that can lead to arbitrary code execution or crash via uninitialized memory. Affected products/versions (per initial description): Flash Player before 13.0.0.252 and 14.x and 15.x before...

CVE-2014-0590

CVE-2014-0590 is a type-confusion vulnerability in Adobe Flash Player that could allow remote code execution via a specially crafted SWF file. According to the provided documents, affected versions include Flash Player before 13.0.0.252 and 14.x, and before 15.0.0.223 on Windows and OS X, plus be...

CVE-2014-0577

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an...

CVE-2014-0589

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute...

Adobe Flash Player and AIR CVE-2014-8440 Unspecified Memory Corruption Vulnerability

Description Adobe Flash Player and AIR are prone to an unspecified memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition...

Adobe Flash Player and AIR CVE-2014-0577 Type Confusion Remote Code Execution Vulnerability

Description Adobe Flash Player and AIR are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...

Adobe Flash Player and AIR CVE-2014-0588 Use After Free Remote Code Execution Vulnerability

Description Adobe Flash Player and AIR are prone to an unspecified remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition...

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory

This module exploits an uninitialized memory vulnerability in Adobe Flash Player. The vulnerability occurs in the ByteArray::UncompressViaZlibVariant method, which fails to initialize allocated memory. When using a correct memory layout this vulnerability leads to a ByteArray object corruption,...

EMET 5.1 is available

Today, we’re releasing the Enhanced Mitigation Experience Toolkit EMET 5.1 which will continue to improve your security posture by providing increased application compatibility and hardened mitigations. You can download EMET 5.1 from microsoft.com/emet or directly from here. Following is the list...

Adobe Flash Player Memory Corruption (APSB14-21: CVE-2014-0555)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption (APSB14-21: CVE-2014-0549)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...