Vulnerability in Adobe Air

CVE-2014-8441

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8440.

EPSS: 0.063 (92.8th percentile) — read the EPSS interpretation.

Affected products

Adobe Air
Adobe Air_sdk
Adobe Air_sdk_\&_compiler
Adobe Flash_player
Apple Mac_os_x
Linux Linux_kernel
Microsoft Windows
N/a — versions n/a

References

psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@adobe.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
psirt@adobe.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)