CVE-2014-0556

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

84.58% chance of exploitation in the next 30 days, 100th percentile

Published

2014-09-10

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_copy…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36808

Security advisories

• http://helpx.adobe.com/security/products/flash-player/apsb14-21.html
• http://www.securityfocus.com/bid/69696

References

• CVE Record
• NVD entry