CVE Vulnerabilities

CVE-2014-0553

Published: Sep 10, 2014 | Modified: Apr 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.

Affected Software

NameVendorStart VersionEnd Version
Adobe_air_sdkAdobe*14.0.0.178 (including)
Adobe_air_sdkAdobe13.0.0.83 (including)13.0.0.83 (including)
Adobe_air_sdkAdobe13.0.0.111 (including)13.0.0.111 (including)
Adobe_air_sdkAdobe14.0.0.110 (including)14.0.0.110 (including)
Adobe_air_sdkAdobe14.0.0.137 (including)14.0.0.137 (including)
Supplementary for Red Hat Enterprise Linux 5RedHatflash-plugin-0:11.2.202.406-1.el5*
Supplementary for Red Hat Enterprise Linux 6RedHatflash-plugin-0:11.2.202.406-1.el6*
Adobe-flashpluginUbuntulucid*
Adobe-flashpluginUbuntuprecise*
Adobe-flashpluginUbuntutrusty*
Adobe-flashpluginUbuntuupstream*
Flashplugin-nonfreeUbuntudevel*
Flashplugin-nonfreeUbuntulucid*
Flashplugin-nonfreeUbuntuprecise*
Flashplugin-nonfreeUbuntutrusty*
Flashplugin-nonfreeUbuntuupstream*

References