Adobe AIR < 13.0.0.83 Multiple Vulnerabilities (APSB14-09)

2015-07-1000:00:00

Tenable

www.tenable.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.334

Percentile

97.1%

Versions of Adobe AIR prior to 13.0.0.83 are unpatched for the following vulnerabilities :

A use-after-free error exists that could lead to arbitrary code execution. (CVE-2014-0506)
A buffer overflow error exists that could lead to arbitrary code execution. (CVE-2014-0507)
An unspecified error exists that could allow a security bypass leading to information disclosure. (CVE-2014-0508)
An unspecified error exists that could allow cross-site scripting attacks. (CVE-2014-0509)