CVSS: 10.0EPSS: 1%CPEs: 10EXPL: 0CVE-2014-0585 – flash-plugin: multiple code execution flaws (APSB14-24)
https://notcve.org/view.php?id=CVE-2014-0585
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590. Adobe Flash Player anterior a 13.0.0.252 y 14.x y 15.x anterior a 15.0.0.223 en Windows y OS X y anterior a 11.2.202.418 en Linux, Adobe AIR anterior a 15.0.0.356, Adobe AIR SDK anterior a 15.0.0.356, y Adobe AIR SDK & Compiler anterior a 15.0.0.356 permiten a atacantes ejecutar código arbitrario mediante el aprovechamiento de una 'confusión de tipo' no especificada, una vulnerabilidad diferente a CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, y CVE-2014-0590. • http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html https://access.redhat.com/security/cve/CVE-2014-0585 https://bugzilla.redhat.com/show_bug.cgi?id=1162911 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 10.0EPSS: 8%CPEs: 10EXPL: 0CVE-2014-0588 – flash-plugin: multiple code execution flaws (APSB14-24)
https://notcve.org/view.php?id=CVE-2014-0588
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438. Vulnerabilidad de uso después de liberación en Adobe Flash Player anterior a 13.0.0.252 y 14.x y 15.x anterior a 15.0.0.223 en Windows y OS X y anterior a 1.2.202.418 en Linux, Adobe AIR anterior a 15.0.0.356, Adobe AIR SDK anterior a 15.0.0.356, y Adobe AIR SDK & Compiler anterior a 15.0.0.356 permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2014-0573 y CVE-2014-8438. • http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1084 https://access.redhat.com/security/cve/CVE-2014-0588 https://bugzilla.redhat.com/show_bug.cgi?id=1162911 •
CVSS: 10.0EPSS: 97%CPEs: 10EXPL: 1CVE-2014-8440 – Adobe Flash Player - UncompressViaZlibVariant Uninitialized Memory
https://notcve.org/view.php?id=CVE-2014-8440
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441. Adobe Flash Player anterior a 13.0.0.252 y 14.x y 15.x anterior a 15.0.0.223 en Windows y OS X y anterior a 11.2.202.418 en Linux, Adobe AIR anterior a 15.0.0.356, Adobe AIR SDK anterior a 15.0.0.356, y Adobe AIR SDK & Compiler anterior a 15.0.0.356 permiten a atacantes ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados, una vulnerabilidad diferente a CVE-2014-0576, CVE-2014-0581, y CVE-2014-8441. • https://www.exploit-db.com/exploits/36880 http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html http://www.securityfocus.com/bid/71047 https://exchange.xforce.ibmcloud.com/vulnerabilities/98615 https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1081 https://access.redhat.com/security/cve/CVE-2014-8440 https://bugzilla.redhat.com/show_bug.cgi&# •
CVSS: 9.3EPSS: 96%CPEs: 9EXPL: 1CVE-2013-5331 – Adobe Flash Player - Type Confusion Remote Code Execution
https://notcve.org/view.php?id=CVE-2013-5331
Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013. Adobe Flash Player anterior a 11.7.700.257y11.8.x y 11.9.x anterior a 11.9.900.170 en Windows y Mac OS X y en Linux antes de 11.2.202.332 , Adobe AIR anterior a AIR3.9.0.1380 , y Adobe AIR SDK y compilador anterior a 3.9.0.1380 permite a atacantes remotos ejecutar código arbitrario a través de contenido swf manipulado que aprovecha un tipo no especificado "type confusion", como se ha explotado en diciembre de 2013. • https://www.exploit-db.com/exploits/33095 http://helpx.adobe.com/security/products/flash-player/apsb13-28.html http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html http://rhn.redhat.com/errata/RHSA-2013-1818.html https://access.redhat.com/security/cve/CVE-2013-5331 https://bugzilla.redhat.com/show_bug.cgi?id=1040185 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 2%CPEs: 9EXPL: 0CVE-2013-5332 – flash-plugin: multiple code execution flaws (APSB13-28)
https://notcve.org/view.php?id=CVE-2013-5332
Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Adobe Flash Player anterior a 11.7.700.257 y 11.8.x y 11.9.x antes 11.9.900.170 en Windows y Mac OS X y antes de 11.2.202.332 en Linux, Adobe AIR 3.9.0.1380 antes, Adobe AIR SDK 3.9.0.1380 antes, y Adobe AIR SDK y compilador antes 3.9.0.1380 permite a un atacante ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. • http://helpx.adobe.com/security/products/flash-player/apsb13-28.html http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html http://rhn.redhat.com/errata/RHSA-2013-1818.html https://access.redhat.com/security/cve/CVE-2013-5332 https://bugzilla.redhat.com/show_bug.cgi?id=1040185 • CWE-94: Improper Control of Generation of Code ('Code Injection') •