PT-2014-1358 · Adobe+3 · Air Sdk & Compiler+7

Published 2014-09-09 · Updated 2017-08-29 · CVE-2014-0555

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe AIR (affected versions not specified) Adobe Pepper Flash for Google Chrome (affected versions not specified) Adobe AIR SDK (affected versions not specified) Adobe AIR SDK & Compiler (affected versions not specified)

Description The issue allows an attacker to execute arbitrary code or cause a denial of service (memory error). This can be achieved through exploitation in Adobe Flash Player, Adobe AIR, Adobe Pepper Flash for Google Chrome, Adobe AIR SDK, and Adobe AIR SDK & Compiler.

Recommendations For Adobe Flash Player, update to a version that contains a fix for this issue. For Adobe AIR, update to a version that contains a fix for this issue. For Adobe Pepper Flash for Google Chrome, update to a version that contains a fix for this issue. For Adobe AIR SDK, update to a version that contains a fix for this issue. For Adobe AIR SDK & Compiler, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2014-2119

BDU:2015-00218

BDU:2015-00294

BDU:2015-00295

CVE-2014-0555

MGASA-2014-0382

OPENSUSE-SU-2014_1110-1

OPENSUSE-SU-2014_1130-1

RHSA-2014:1173

RHSA-2014_1173

Affected Products

Alt Linux

Air

Air Sdk

Air Sdk & Compiler

Flash Player

Pepper Flash For Google Chrome

Red Hat

Suse

References · 96

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_copy_pixels_to_byte_array.rb · Exploit
• https://osv.dev/vulnerability/MGASA-2014-0382 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00342 · Security Note
• https://bdu.fstec.ru/vul/2015-00267 · Security Note
• https://bdu.fstec.ru/vul/2015-00290 · Security Note
• https://bdu.fstec.ru/vul/2015-00233 · Security Note
• https://bdu.fstec.ru/vul/2015-00270 · Security Note
• https://bdu.fstec.ru/vul/2015-00289 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0555 · Security Note
• https://bdu.fstec.ru/vul/2015-00343 · Security Note
• https://bdu.fstec.ru/vul/2015-00216 · Security Note
• https://bdu.fstec.ru/vul/2015-00291 · Security Note
• https://bdu.fstec.ru/vul/2015-00217 · Security Note
• https://ubuntu.com/security/CVE-2014-0555 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00307 · Security Note