CVE-2014-0538 — Vulnetix

CVE-2014-0538 PUBLISHED

Reported by adobe · Published August 12, 2014

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*, n/a

Exploit Intelligence

Adobe Flash Player FileReference Use-after-Free Vulnerability (hackerone)
Adobe Flash Player FileReference Use-after-Free Vulnerability (hackerone)

Timeline

Aug 12, 2014 CVE Published
Oct 7, 2014 PoC Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 3, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 25, 2023 EPSS Score
Jul 16, 2023 EPSS Score
Oct 29, 2023 EPSS Score

References

60710 third-party-advisoryx_refsource_SECUNIA
60732 third-party-advisoryx_refsource_SECUNIA
59904 third-party-advisoryx_refsource_SECUNIA
GLSA-201408-16 vendor-advisoryx_refsource_GENTOO
x_refsource_CONFIRM
58593 third-party-advisoryx_refsource_SECUNIA
1030712 vdb-entryx_refsource_SECTRACK
GLSA-201408-05 vendor-advisoryx_refsource_GENTOO

Open in Interactive Console →