flash-plugin: two flaws leading to code execution (APSB14-09)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Supplementary for Red Hat Enterprise Linux 5 | |||
| flash-plugin-0:11.2.202.350-1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2014:0380 | 2014-04-09T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 6 | |||
| flash-plugin-0:11.2.202.350-1.el6 | cpe:/a:redhat:rhel_extras:6 | RHSA-2014:0380 | 2014-04-09T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2014-0538 | Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors. |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 6.4% (6.419% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.