Vulnerability in Adobe Air Desktop Runtime

CVE-2014-0564

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.

EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.

Affected products

References

  • psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • psirt@adobe.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • psirt@adobe.com (x_refsource_REDHAT, vendor-advisory, Broken Link)
  • psirt@adobe.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
  • psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)