CVE-2014-0558

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293…

published October 15, 2014

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

⚠️ This is a slippery one! Adobe Flash Player versions before 13.0.0.250 on Windows and OS X, and prior to 11.2.202.411 on Linux, are vulnerable to code execution or memory corruption without even breaking a sweat! 🔥 Think of it like a restaurant where the chefs can take orders without checking with the manager first. An attacker could serve themselves all kinds of unsanctioned dishes that could spoil the whole meal! The consequences could be pretty dire! An attacker could execute arbitrary code, potentially taking complete control of affected systems or causing them to crash. This could lead to a denial of service, making your applications and services as unreliable as a flickering light bulb.

Put simply

Think of it like a restaurant where the chefs can take orders without checking with the manager first. An attacker could serve themselves all kinds of unsanctioned dishes that could spoil the whole meal! This vulnerability in Adobe Flash Player allows attackers to exploit unspecified vectors leading to memory corruption, resulting in arbitrary code execution or service denial. It's a serious flaw that can unleash havoc if left unaddressed.

What to do

The consequences could be pretty dire! An attacker could execute arbitrary code, potentially taking complete control of affected systems or causing them to crash. This could lead to a denial of service, making your applications and services as unreliable as a flickering light bulb. First things first, update your Adobe Flash Player to the latest version, 13.0.0.250 or later for Windows and OS X, or 11.2.202.411 for Linux. Make sure your Adobe AIR and AIR SDK are also patched to versions 15.0.0.293 and 15.0.0.302 respectively. Don't forget to enable automatic updates! You've got this! Stay vigilant, follow these steps, and you'll keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05073 · 92.2th percentile
Published
2014-10-15T10:00Z
EPSS history
Timeline
  • 15 OCT 10:00Z
    Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293…
    cvelistv5