PT-2014-1356 · Adobe+3 · Air Sdk & Compiler+7

Published 2014-09-09 · Updated 2017-08-29 · CVE-2014-0551

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe AIR (affected versions not specified) Adobe Flash Player (affected versions not specified) Adobe Pepper Flash for Google Chrome (affected versions not specified) Adobe AIR SDK (affected versions not specified) Adobe AIR SDK & Compiler (affected versions not specified)

Description The issue allows an attacker to execute arbitrary code or cause a denial of service (memory corruption error). It affects multiple Adobe products, including Adobe AIR, Adobe Flash Player, Adobe Pepper Flash for Google Chrome, Adobe AIR SDK, and Adobe AIR SDK & Compiler.

Recommendations For Adobe AIR, update to a version that contains a fix for this issue. For Adobe Flash Player, update to a version that contains a fix for this issue. For Adobe Pepper Flash for Google Chrome, update to a version that contains a fix for this issue. For Adobe AIR SDK, update to a version that contains a fix for this issue. For Adobe AIR SDK & Compiler, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2014-2119

BDU:2015-00216

BDU:2015-00290

BDU:2015-00291

CVE-2014-0551

MGASA-2014-0382

OPENSUSE-SU-2014_1110-1

OPENSUSE-SU-2014_1130-1

RHSA-2014:1173

RHSA-2014_1173

Affected Products

Alt Linux

Air

Air Sdk

Air Sdk & Compiler

Flash Player

Pepper Flash For Google Chrome

Red Hat

Suse

References · 96

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_copy_pixels_to_byte_array.rb · Exploit
• https://osv.dev/vulnerability/MGASA-2014-0382 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00342 · Security Note
• https://bdu.fstec.ru/vul/2015-00267 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-0551 · Security Note
• https://bdu.fstec.ru/vul/2015-00290 · Security Note
• https://bdu.fstec.ru/vul/2015-00233 · Security Note
• https://bdu.fstec.ru/vul/2015-00270 · Security Note
• https://bdu.fstec.ru/vul/2015-00289 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0555 · Security Note
• https://bdu.fstec.ru/vul/2015-00343 · Security Note
• https://bdu.fstec.ru/vul/2015-00216 · Security Note
• https://bdu.fstec.ru/vul/2015-00291 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-0551 · Security Note
• https://bdu.fstec.ru/vul/2015-00217 · Security Note