CVE-2014-9163
High · 7.8 CISA KEVCVSS
7.8
EPSS
20.7%
Published
Dec 10, 2014
CISA due date
May 4, 2022
The record
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:4 | flash-player-plugin | 0 | 11.2.202.425-1.mga4.nonfree |
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:11.2.202.425-1.el5 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:11.2.202.425-1.el5 |
| Red Hat:rhel_extras:6 | flash-plugin | 0 | 0:11.2.202.425-1.el6 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 11.2.202.425ubuntu0.14.04.1 |
Related vulnerabilities
- CVE-2015-5563 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5562 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5561 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5560 Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before… Also affects flash-player-plugin
- CVE-2015-5558 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5557 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5556 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5555 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin