flash-plugin: arbitrary code execution flaws (APSB14-16)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
| AND |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Supplementary for Red Hat Enterprise Linux 5 | |||
| flash-plugin-0:11.2.202.378-1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2014:0745 | 2014-06-11T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 6 | |||
| flash-plugin-0:11.2.202.378-1.el6 | cpe:/a:redhat:rhel_extras:6 | RHSA-2014:0745 | 2014-06-11T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2014-0565 | Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0535. |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 6.1% (6.090% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.