Cloudanix VulnDB

CVE-2014-0559

None

CVSS

—

EPSS

13.3%

Published

Sep 10, 2014

CISA due date

—

The record

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.

Affected packages

Ecosystem Package Introduced Fixed
Mageia:3 flash-player-plugin 0 11.2.202.406-1.mga3.nonfree
Mageia:4 flash-player-plugin 0 11.2.202.406-1.mga4.nonfree
Red Hat:rhel_extras:5::client flash-plugin 0 0:11.2.202.406-1.el5
Red Hat:rhel_extras:5::server flash-plugin 0 0:11.2.202.406-1.el5
Red Hat:rhel_extras:6 flash-plugin 0 0:11.2.202.406-1.el6
Ubuntu:14.04:LTS flashplugin-nonfree 0 11.2.202.406ubuntu0.14.04.1

Related vulnerabilities