PT-2014-1366 · Adobe+2 · Air Sdk & Compiler+5

Publicado

2014-10-14

·

Atualizado

2017-01-03

·

CVE-2014-0558

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.250 Adobe Flash Player versions 14.x Adobe Flash Player versions 15.x prior to 15.0.0.189 Adobe AIR versions prior to 15.0.0.293 Adobe AIR SDK versions prior to 15.0.0.302 Adobe AIR SDK & Compiler versions prior to 15.0.0.302
Description The issue allows an attacker to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via unspecified vectors.
Recommendations For Adobe Flash Player versions prior to 13.0.0.250, update to version 13.0.0.250 or later. For Adobe Flash Player versions 14.x, update to version 15.0.0.189 or later. For Adobe Flash Player versions 15.x prior to 15.0.0.189, update to version 15.0.0.189 or later. For Adobe AIR versions prior to 15.0.0.293, update to version 15.0.0.293 or later. For Adobe AIR SDK versions prior to 15.0.0.302, update to version 15.0.0.302 or later. For Adobe AIR SDK & Compiler versions prior to 15.0.0.302, update to version 15.0.0.302 or later.

Exploit

Correção

DoS

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2015-00226
BDU:2015-00308
BDU:2015-00309
CVE-2014-0558
MGASA-2014-0448
RHSA-2014:1648
RHSA-2014_1648
SUSE-SU-2014_1360-1
SUSE-SU-2014_1423-1

Produtos afetados

Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse