CVE-2014-0569

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.
References
Link Resource
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1648.html Broken Link
http://secunia.com/advisories/61980 Third Party Advisory
http://www.securityfocus.com/bid/70441 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031019 Third Party Advisory VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-14-365/ Third Party Advisory VDB Entry
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00002.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2014-10/msg00033.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1648.html Broken Link
http://secunia.com/advisories/61980 Third Party Advisory
http://www.securityfocus.com/bid/70441 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031019 Third Party Advisory VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-14-365/ Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:adobe:flash_player:*:*:*:*:extended_support:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer_10:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer_11:*:*
OR cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Configuration 9 (hide)

OR cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*

History

No history.

Information

Published : 2014-10-15 10:55

Updated : 2025-04-12 10:46


NVD link : CVE-2014-0569

Mitre link : CVE-2014-0569

CVE.ORG link : CVE-2014-0569


JSON object : View

Products Affected

opensuse

  • opensuse
  • evergreen

adobe

  • flash_player
  • air_sdk
  • air_desktop_runtime
  • flash_player_desktop_runtime

suse

  • linux_enterprise_desktop

apple

  • macos
  • iphone_os

google

  • android

microsoft

  • windows_8.1
  • windows_8
  • windows

linux

  • linux_kernel
CWE
CWE-190

Integer Overflow or Wraparound