CVE-2014-8439
Adobe Flash Player Dereferenced Pointer Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
YesDecision
Descriptions
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
Adobe Flash Player anterior a 13.0.0.258 y 14.x y 15.x anterior a 15.0.0.239 en Windows y OS X y anterior a 11.2.202.424 en Linux, Adobe AIR anterior a 15.0.0.293, Adobe AIR SDK anterior a 15.0.0.302, y Adobe AIR SDK & Compiler anterior a 15.0.0.302 permiten a atacantes ejecutar código arbitrario o causar una denegación de servicio (referencia a puntero inválida) a través de vectores no especificados.
Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2014-10-22 CVE Reserved
- 2014-11-25 CVE Published
- 2022-05-25 Exploited in Wild
- 2022-06-15 KEV Due Date
- 2024-07-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/71289 | Third Party Advisory | |
| http://www.securitytracker.com/id/1031259 | Third Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/98932 | Third Party Advisory | |
| https://www.f-secure.com/weblog/archives/00002768.html | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | <= 11.2.202.418 Search vendor "Adobe" for product "Flash Player" and version " <= 11.2.202.418" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | <= 15.0.0.223 Search vendor "Adobe" for product "Flash Player" and version " <= 15.0.0.223" | - |
Affected
| in | Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | <= 15.0.0.223 Search vendor "Adobe" for product "Flash Player" and version " <= 15.0.0.223" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | <= 13.0.0.252 Search vendor "Adobe" for product "Flash Player" and version " <= 13.0.0.252" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | <= 13.0.0.252 Search vendor "Adobe" for product "Flash Player" and version " <= 13.0.0.252" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Air Search vendor "Adobe" for product "Air" | <= 15.0.0.292 Search vendor "Adobe" for product "Air" and version " <= 15.0.0.292" | - |
Affected
| ||||||
| Adobe Search vendor "Adobe" | Air Sdk Search vendor "Adobe" for product "Air Sdk" | <= 15.0.0.301 Search vendor "Adobe" for product "Air Sdk" and version " <= 15.0.0.301" | - |
Affected
| ||||||
| Adobe Search vendor "Adobe" | Air Sdk And Compiler Search vendor "Adobe" for product "Air Sdk And Compiler" | <= 15.0.0.301 Search vendor "Adobe" for product "Air Sdk And Compiler" and version " <= 15.0.0.301" | - |
Affected
| ||||||