CVE-2014-8439
גבוהה 8.8 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Adobe Flash Player Dereferenced Pointer Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- The impacted product is end-of-life and should be disconnected if still in use.
תיאור (מקור, אנגלית)
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
מדדים
- CVSS 3.1
-
8.8 (HIGH)
מקור הציון: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 20% (אחוזון 100) נכון ל-24/7/2026
- CWE
- CWE-119, CWE-416
מוצרים מושפעים
adobe: flash player; linux: linux kernel; adobe: air; adobe: air sdk; adobe: air sdk \& compiler; apple: macos; microsoft: windows; apple: mac os x
קישורים
- http://helpx.adobe.com/security/products/flash-player/apsb14-22.html Vendor Advisory
- http://helpx.adobe.com/security/products/flash-player/apsb14-26.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1915.html Vendor Advisory
- http://helpx.adobe.com/security/products/flash-player/apsb14-22.html Vendor Advisory
- http://helpx.adobe.com/security/products/flash-player/apsb14-26.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1915.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html Third Party Advisory
- http://secunia.com/advisories/60217 Permissions Required