Lucene search
HistoryAug 12, 2014 - 10:55 p.m.
CVE-2014-0545
cve-2014-0545
adobe flash player
adobe air
aslr
memory address restriction
security vulnerability
windows
os x
linux
android
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.017
Percentile
87.9%
Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0544.
Affected configurations
Node
adobeflash_playerRange≤13.0.0.231
ORadobeflash_playerMatch13.0.0.182
ORadobeflash_playerMatch13.0.0.201
ORadobeflash_playerMatch13.0.0.206
ORadobeflash_playerMatch13.0.0.214
ORadobeflash_playerMatch13.0.0.223
ORadobeflash_playerMatch14.0.0.125
ORadobeflash_playerMatch14.0.0.145
applemac_os_x
ORmicrosoftwindows
Node
adobeadobe_air_sdkRange≤14.0.0.137
ORadobeadobe_air_sdkMatch13.0.0.83
ORadobeadobe_air_sdkMatch13.0.0.111
ORadobeadobe_air_sdkMatch14.0.0.110
Node
adobeadobe_airRange≤14.0.0.110
ORadobeadobe_airMatch13.0.0.83
ORadobeadobe_airMatch13.0.0.111
applemac_os_x
ORmicrosoftwindows
Node
adobeflash_playerRange≤11.2.202.394
ORadobeflash_playerMatch11.2.202.223
ORadobeflash_playerMatch11.2.202.228
ORadobeflash_playerMatch11.2.202.233
ORadobeflash_playerMatch11.2.202.235
ORadobeflash_playerMatch11.2.202.236
ORadobeflash_playerMatch11.2.202.238
ORadobeflash_playerMatch11.2.202.243
ORadobeflash_playerMatch11.2.202.251
ORadobeflash_playerMatch11.2.202.258
ORadobeflash_playerMatch11.2.202.261
ORadobeflash_playerMatch11.2.202.262
ORadobeflash_playerMatch11.2.202.270
ORadobeflash_playerMatch11.2.202.273
ORadobeflash_playerMatch11.2.202.275
ORadobeflash_playerMatch11.2.202.280
ORadobeflash_playerMatch11.2.202.285
ORadobeflash_playerMatch11.2.202.291
ORadobeflash_playerMatch11.2.202.297
ORadobeflash_playerMatch11.2.202.310
ORadobeflash_playerMatch11.2.202.332
ORadobeflash_playerMatch11.2.202.335
ORadobeflash_playerMatch11.2.202.336
ORadobeflash_playerMatch11.2.202.341
ORadobeflash_playerMatch11.2.202.346
ORadobeflash_playerMatch11.2.202.350
ORadobeflash_playerMatch11.2.202.356
ORadobeflash_playerMatch11.2.202.359
ORadobeflash_playerMatch11.2.202.378
linuxlinux_kernel
Node
adobeadobe_airRange≤14.0.0.137
ORadobeadobe_airMatch13.0.0.83
ORadobeadobe_airMatch13.0.0.111
ORadobeadobe_airMatch14.0.0.110
googleandroid
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | flash_player | 13.0.0.182 | cpe:/a:adobe:flash_player:13.0.0.182::: |
| adobe | flash_player | 14.0.0.125 | cpe:/a:adobe:flash_player:14.0.0.125::: |
| adobe | flash_player | 13.0.0.206 | cpe:/a:adobe:flash_player:13.0.0.206::: |
| adobe | flash_player | cpe:/a:adobe:flash_player:::: | |
| adobe | flash_player | 13.0.0.201 | cpe:/a:adobe:flash_player:13.0.0.201::: |
| adobe | flash_player | 13.0.0.214 | cpe:/a:adobe:flash_player:13.0.0.214::: |
| adobe | flash_player | 13.0.0.223 | cpe:/a:adobe:flash_player:13.0.0.223::: |
| adobe | flash_player | 14.0.0.145 | cpe:/a:adobe:flash_player:14.0.0.145::: |
Related
googleprojectzero
googleprojectzero
What does a pointer look like, anyway?
2014-08-21 00:00:00
ubuntucve
ubuntucve
cve
cve
prion
prion
Design/Logic Flaw
2014-08-12 22:55:00
Design/Logic Flaw
2014-08-12 22:55:00
Design/Logic Flaw
2014-08-12 22:55:00
nvd
nvd
cvelist
cvelist
openvas
openvas
SUSE: Security Advisory for flash-player (SUSE-SU-2014:1035-1)
2015-10-16 00:00:00
openSUSE: Security Advisory for update (openSUSE-SU-2014:1029-1)
2014-08-17 00:00:00
Mageia: Security Advisory (MGASA-2014-0335)
2022-01-28 00:00:00
suse
suse
update for flash-player (critical)
2014-08-14 13:04:21
Security update for flash-player (important)
2014-08-19 01:04:46
update for flash-player (critical)
2014-08-16 17:04:18
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2014-08-18 13:14:56
nessus
nessus
GLSA-201408-05 : Adobe Flash Player: Multiple vulnerabilities
2014-08-15 00:00:00
openSUSE Security Update : flash-player (openSUSE-SU-2014:1020-1)
2014-08-15 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2014-08-14 00:00:00
redhat
redhat
(RHSA-2014:1051) Critical: flash-plugin security update
2014-08-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Memory Leakage (APSB14-18: CVE-2014-0545)
2014-09-07 00:00:00
Adobe Flash Player Memory Leakage (APSB14-18: CVE-2014-0542)
2014-08-26 00:00:00
Adobe Flash Player Memory Leakage (APSB14-18: CVE-2014-0544)
2014-09-01 00:00:00
zdi
zdi
Adobe Flash Player Vector Object Information Disclosure Vulnerability
2014-08-12 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.017
Percentile
87.9%
Related for CVE-2014-0545