Vulnerability CVE-2014-8439: Information

Description

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Severity: CRITICAL (10.0)

Published: Nov. 26, 2014
Modified: Sept. 22, 2021
Error type identifier: CWE-119

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
adobe-flash-playerp911-alt3632-alt1110ALT-PU-2014-2388-1135510Fixed
adobe-flash-playerc9f211-alt3632-alt117ALT-PU-2014-2388-1135510Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://helpx.adobe.com/security/products/flash-player/apsb14-26.html
  • Vendor Advisory
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html
  • Vendor Advisory
openSUSE-SU-2014:1508
  • Third Party Advisory
RHSA-2014:1915
  • Vendor Advisory
SUSE-SU-2014:1545
  • Third Party Advisory
openSUSE-SU-2014:1562
  • Third Party Advisory
https://www.f-secure.com/weblog/archives/00002768.html
  • Third Party Advisory
60217
  • Permissions Required
1031259
  • Third Party Advisory
  • VDB Entry
71289
  • Third Party Advisory
  • VDB Entry
adobe-flash-cve20148439-code-exec(98932)
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

      Configuration 2

      cpe:2.3:a:adobe:air_sdk_and_compiler:*:*:*:*:*:*:*:*
      End including
      15.0.0.301

      cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*
      End including
      15.0.0.301

      cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
      End including
      15.0.0.292

      Configuration 3

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

      Configuration 4

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*