KLA10002 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to inject arbitrary script or HTML, access restrictions, execute arbitrary code or cause denial of service

Vectors related to unknown applications can be exploited to inject arbitrary script or HTML, access restrictions, execute arbitrary code, or cause denial of service via cross-site scripting (XSS) or other unknown methods.

Original advisories

Adobe Bulletin

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Adobe-Flash-Player-ActiveX

Adobe-Flash-Player-NPAPI

Macromedia-Flash-Player

CVE list

CVE-2014-0533 warning

CVE-2014-0534 critical

CVE-2014-0531 warning

CVE-2014-0532 warning

CVE-2014-0535 critical

CVE-2014-0536 critical

Solution

Update to latest version

Flash Player

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

Affected Products

• Flash Player 13.0.0.214 and earlier versions for Windows and MacintoshFlash Player 11.2.202.359 and earlier for LinuxAIR 13.0.0.111 and earlier versions