CVE-2014-0515
high · 10Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.
10
CVSS
94.6%
EPSS (exploit prob.)
100th
EPSS percentile
2014-04-29
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | flash_player | >= 11.0, < 11.2.202.346 |
| linux | linux_kernel | all versions |
| adobe | flash_player | >= 11.0, < 11.7.700.279 |
| adobe | flash_player | >= 11.8, < 13.0.0.206 |
| apple | mac_os_x | all versions |
| microsoft | windows | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://helpx.adobe.com/security/products/flash-player/apsb14-13.html
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2014-0447.html
- http://security.gentoo.org/glsa/glsa-201405-04.xml
- http://www.securityfocus.com/bid/67092
- http://www.securitytracker.com/id/1030155
- http://helpx.adobe.com/security/products/flash-player/apsb14-13.html
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2014-0447.html
- http://security.gentoo.org/glsa/glsa-201405-04.xml
- http://www.securityfocus.com/bid/67092
- http://www.securitytracker.com/id/1030155
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-0515