CVE-2014-0559

high · 10

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.

CVSS

13.0%

EPSS (exploit prob.)

96th

EPSS percentile

2014-09-10

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
adobe	adobe_air	<= 14.0.0.178
adobe	adobe_air	13.0.0.83
adobe	adobe_air	13.0.0.111
adobe	adobe_air	14.0.0.110
adobe	adobe_air	14.0.0.137
apple	mac_os_x	all versions
microsoft	windows	all versions
adobe	flash_player	<= 13.0.0.241
adobe	flash_player	13.0.0.182
adobe	flash_player	13.0.0.201
adobe	flash_player	13.0.0.206
adobe	flash_player	13.0.0.214
adobe	flash_player	13.0.0.223
adobe	flash_player	13.0.0.231
adobe	flash_player	14.0.0.125
adobe	flash_player	14.0.0.145
adobe	flash_player	14.0.0.176
adobe	flash_player	14.0.0.179
adobe	flash_player	15.0.0.144
apple	mac_os_x	all versions
microsoft	windows	all versions
adobe	adobe_air_sdk	<= 14.0.0.178
adobe	adobe_air_sdk	13.0.0.83
adobe	adobe_air_sdk	13.0.0.111
adobe	adobe_air_sdk	14.0.0.110
adobe	adobe_air_sdk	14.0.0.137
adobe	adobe_air	<= 14.0.0.179
adobe	adobe_air	13.0.0.83
adobe	adobe_air	13.0.0.111
adobe	adobe_air	14.0.0.110
adobe	adobe_air	14.0.0.137
google	android	all versions
adobe	flash_player	<= 11.2.202.400
adobe	flash_player	11.2.202.223
adobe	flash_player	11.2.202.228
adobe	flash_player	11.2.202.233
adobe	flash_player	11.2.202.235
adobe	flash_player	11.2.202.236
adobe	flash_player	11.2.202.238
adobe	flash_player	11.2.202.243

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-0559