CVE-2014-9163
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
YesDecision
Descriptions
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.
Desbordamiento de buffer basado en pila en Adobe Flash Player anterior a 13.0.0.259 y 14.x y 15.x anterior a 15.0.0.246 en Windows y OS X y anteriores 11.2.202.425 en Linux permite a atacantes ejecutar código arbitrario a través de vectores no especificados, tal y como fue utilizado activamente en diciembre del 2014.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists when calling parseFloat on a specific datatype. This can allow for an attacker to cause a fixed size stack buffer to overflow. An attacker can leverage this vulnerability to execute code within the context of the current process.
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2014-12-01 CVE Reserved
- 2014-12-09 CVE Published
- 2022-04-13 Exploited in Wild
- 2022-05-04 KEV Due Date
- 2024-08-06 CVE Updated
- 2024-10-22 EPSS Updated
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://helpx.adobe.com/security/products/flash-player/apsb14-27.html | 2018-12-20 | |
| https://access.redhat.com/security/cve/CVE-2014-9163 | 2014-12-10 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1172431 | 2014-12-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | >= 13.0 < 13.0.0.259 Search vendor "Adobe" for product "Flash Player" and version " >= 13.0 < 13.0.0.259" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | >= 13.0 < 13.0.0.259 Search vendor "Adobe" for product "Flash Player" and version " >= 13.0 < 13.0.0.259" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | >= 14.0 <= 14.0.0.179 Search vendor "Adobe" for product "Flash Player" and version " >= 14.0 <= 14.0.0.179" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | >= 14.0 <= 14.0.0.179 Search vendor "Adobe" for product "Flash Player" and version " >= 14.0 <= 14.0.0.179" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | >= 15.0 < 15.0.0.246 Search vendor "Adobe" for product "Flash Player" and version " >= 15.0 < 15.0.0.246" | - |
Affected
| in | Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | >= 15.0 < 15.0.0.246 Search vendor "Adobe" for product "Flash Player" and version " >= 15.0 < 15.0.0.246" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Adobe Search vendor "Adobe" | Flash Player Search vendor "Adobe" for product "Flash Player" | >= 11.0 < 11.2.202.425 Search vendor "Adobe" for product "Flash Player" and version " >= 11.0 < 11.2.202.425" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | * | - |
Safe
|