Vulnerability in Adobe Air

CVE-2014-0499

Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.

EPSS: 0.037 (88.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • psirt@adobe.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
  • psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • psirt@adobe.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
  • psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)