CVE-2014-0502

🗓️ 21 Feb 2014 02:00:00Reported by adobeType

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code

Reporter	Title	Published	Views	Family All 49
Tenable Nessus	Flash Player < 11.7.700.269 / 12.0.0.70 Multiple Vulnerabilities (APSB14-07)	10 Jul 201500:00	–	nessus
Tenable Nessus	Flash Player <= 11.7.700.261 / 12.0.0.44 Multiple Vulnerabilities (APSB14-07)	20 Feb 201400:00	–	nessus
Tenable Nessus	GLSA-201405-04 : Adobe Flash Player: Multiple vulnerabilities	5 May 201400:00	–	nessus
Tenable Nessus	Flash Player for Mac <= 11.7.700.261 / 12.0.0.44 Multiple Vulnerabilities (APSB14-07) (Mac OS X)	20 Feb 201400:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-SU-2014:0277-1)	13 Jun 201400:00	–	nessus
Tenable Nessus	RHEL 5 / 6 : flash-plugin (RHSA-2014:0196)	23 Feb 201400:00	–	nessus
Tenable Nessus	MS KB2934802: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	20 Feb 201400:00	–	nessus
Tenable Nessus	SuSE 11.3 Security Update : flash-player (SAT Patch Number 8922)	26 Feb 201400:00	–	nessus
ATTACKERKB	CVE-2014-0502	21 Feb 201400:00	–	attackerkb
Circl	CVE-2014-0502	20 Feb 201419:37	–	circl

[
  {
    "cpes": [
      "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*"
    ],
    "vendor": "adobe",
    "product": "flash_player",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.7.700.269",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "11.8.0",
        "lessThan": "12.0.0.70",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*"
    ],
    "vendor": "adobe",
    "product": "flash_player",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.7.700.269",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "11.8.0",
        "lessThan": "12.0.0.70",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*"
    ],
    "vendor": "adobe",
    "product": "air",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.0.0.1628",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*"
    ],
    "vendor": "adobe",
    "product": "air_sdk",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.0.0.1628",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html
security	www.security.gentoo.org/glsa/glsa-201405-04.xml
rhn	www.rhn.redhat.com/errata/RHSA-2014-0196.html
volatility-labs	www.volatility-labs.blogspot.com/2014/04/building-decoder-for-cve-2014-0502.html
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html
helpx	www.helpx.adobe.com/security/products/flash-player/apsb14-07.html
alienvault	www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502/
lists	www.lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html

18 Jan 2017 20:57Current

8.1High risk

Vulners AI Score8.1

EPSS0.24204

SSVC