Integer overflow in Adobe Air_desktop_runtime

CVE-2014-0569

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler b…

Vulnerability class: Integer Overflow

EPSS: 0.890 (99.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

  • openSUSE-SU-2014:1329 (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
  • 70441 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • 61980 (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • SUSE-SU-2014:1360 (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • RHSA-2014:1648 (x_refsource_REDHAT, vendor-advisory, Broken Link)
  • 1031019 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
  • psirt@adobe.com (VDB Entry, Third Party Advisory, x_refsource_MISC)
  • psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • openSUSE-SU-2015:0725 (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)

Frequently asked questions

What is CVE-2014-0569?
CVE-2014-0569 is a vulnerability in Adobe Air_desktop_runtime, classified under Integer Overflow or Wraparound. Published 2014-10-15.
Is CVE-2014-0569 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.