CVE Vulnerabilities

CVE-2014-0492

Published: Jan 15, 2014 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an address leak.

Affected Software

NameVendorStart VersionEnd Version
Flash_playerAdobe11.0 (including)11.7.700.260 (excluding)
Flash_playerAdobe11.8 (including)11.8.800.175 (excluding)
Flash_playerAdobe11.9 (including)12.0.0.38 (excluding)
Supplementary for Red Hat Enterprise Linux 5RedHatflash-plugin-0:11.2.202.335-1.el5*
Supplementary for Red Hat Enterprise Linux 6RedHatflash-plugin-0:11.2.202.335-1.el6*
Adobe-flashpluginUbuntulucid*
Adobe-flashpluginUbuntuprecise*
Adobe-flashpluginUbuntuquantal*
Adobe-flashpluginUbunturaring*
Adobe-flashpluginUbuntusaucy*
Flashplugin-nonfreeUbuntudevel*
Flashplugin-nonfreeUbuntulucid*
Flashplugin-nonfreeUbuntuprecise*
Flashplugin-nonfreeUbuntuquantal*
Flashplugin-nonfreeUbunturaring*
Flashplugin-nonfreeUbuntusaucy*

References