peter bassill · operator
$ cve CVE-2014-0569 JSON

CVE-2014-0569 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 91.3% (pctl 100)

Patch early

A public exploit exists.

Description

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS91.33% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-190
On CISA KEVno
Public exploityes
Published2014-10-15
Last modified2026-06-17

Affected (14)

VendorProduct
adobeair desktop runtime
adobeair sdk
adobeflash player
adobeflash player desktop runtime
appleiphone os
applemacos
googleandroid
linuxlinux kernel
microsoftwindows
microsoftwindows 8
microsoftwindows 8.1
opensuseevergreen
opensuseopensuse
suselinux enterprise desktop

Public exploits

SourceTitleDate
exploit-dbAdobe Flash Player - casi32 Integer Overflow (Metasploit)2015-04-13

References

→ the Explorer  ·  watch your stack  ·  NVD