PT-2014-1344 · Adobe+2 · Flash Player+2

Publicado

2014-03-27

·

Atualizado

2014-06-21

·

CVE-2014-0510

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player version 12.0.0.77
Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism. This was demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014. The issue can be exploited via unspecified vectors.
Recommendations For Adobe Flash Player version 12.0.0.77, update to a newer version to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to Flash content until a patch is available.

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-00204
BDU:2015-00266
CVE-2014-0510
MGASA-2014-0220
RHSA-2014:0496
RHSA-2014_0496
SUSE-SU-2014_0671-1
ZDI-14-130

Produtos afetados

Flash Player
Red Hat
Suse