Unscored severity · published Oct 15, 2014
CVE-2014-0569
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293,…
–
CVSS
91.3%
EPSS
No
On KEV
Description
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)91.3% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Air Desktop Runtime · Adobe
through 15.0.0.249 · source: NVD
AS
Air Sdk · Adobe
through 15.0.0.249; through 15.0.0.252 · source: NVD
EV
Evergreen · Opensuse
11.4 · source: NVD
FP
Flash Player · Adobe
through 11.2.202.406; through 13.0.0.244; through 15.0.0.152; through 15.0.0.167; through 15.0.0.167 · source: NVD
FP
Flash Player Desktop Runtime · Adobe
through 15.0.0.167 · source: NVD
LE
Linux Enterprise Desktop · Suse
11 · source: NVD
OP
Opensuse · Opensuse
12.3; 13.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0569
Patch
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2014-1648.html
Third Party Advisory
http://secunia.com/advisories/61980
More from Air Desktop Runtime
9.8
CVE-2016-1019
Adobe Flash Player Arbitrary Code Execution Vulnerability
8.8
CVE-2016-1010
Adobe Flash Player and AIR Integer Overflow Vulnerability
8.8
CVE-2016-0984
Adobe Flash Player and AIR Use-After-Free Vulnerability
9.8
CVE-2016-4163
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
9.8
CVE-2016-4162
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…