CVE-2014-0552
HighSummary
Adobe Flash Player and Adobe AIR versions before 13.0.0.244 and 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux, as well as Adobe AIR SDK before 15.0.0.249, allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.
Risk Assessment
Exploitation of this vulnerability may lead to serious security incidents, including system takeover or disruption of service. Organizations should be aware of the risks associated with using outdated software versions.
Recommendation
It is recommended to update Adobe Flash Player and Adobe AIR to the latest versions to minimize the risk associated with this vulnerability. Regular monitoring and updating of software should be part of the organization's security strategy.
Other vulnerabilities in Adobe Flash Player, Adobe AIR, Adobe AIR SDK
See all- CVE-2016-1000High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176.
- CVE-2016-0999High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. It also affects Adobe AIR and Adobe AIR SDK before version 21.0.0.176, allowing attackers to execute arbitrary code.
- CVE-2016-0997High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176, allowing attackers to execute arbitrary code.
- CVE-2016-0995High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176.
- CVE-2016-0991High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176, allowing attackers to execute arbitrary code.
- CVE-2016-0986High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.
- CVE-2015-8820High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data.
- CVE-2015-8658High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data.
- CVE-2016-0981High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
- CVE-2016-0980High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Original NVD description (English source)
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.