Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

Versions of Adobe AIR prior to 15.0.0.293 are unpatched for the following vulnerabilities :

 - Multiple memory corruption issues due to improperly sanitized user-supplied input allow arbitrary code execution. (CVE-2014-0564, CVE-2014-0558)
 - An integer overflow issue due to improperly sanitized user-supplied input that allows arbitrary code execution. (CVE-2014-0569)
 - An arbitrary code execution vulnerability due to the handling of a dereferenced memory pointer. (CVE-2014-8439)

Versions of Adobe Flash player prior to 11.7.700.275 / 13.0.0.182 are outdated and thus unpatched for the following vulnerabilities :

  - Multiple memory corruption issues due to improperly sanitized user-supplied input allow arbitrary code execution. (CVE-2014-0564, CVE-2014-0558)
 - An integer overflow issue due to improperly sanitized user-supplied input that allows arbitrary code execution. (CVE-2014-0569)
  - An arbitrary code execution vulnerability due to the handling of a dereferenced memory pointer. (CVE-2014-8439)

The remote host is affected by the vulnerability described in GLSA-201411-06 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

This update fixes multiple code execution vulnerabilities in flash-player (APSB14-22). CVE-2014-0564 / CVE-2014-0558 / CVE-2014-0569 have been assigned to this issue.

- Security update to 11.2.202.411 (bnc#901334) :

  - APSB14-22, CVE-2014-0569 (ZDI-14-365), CVE-2014-0564,     CVE-2014-0558

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-22, listed in the References section.

Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0558, CVE-2014-0564, CVE-2014-0569)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.411.

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 38.0.2125.104. It is, therefore, affected by the following vulnerabilities due to the version of Adobe Flash bundled with the application :

  - Multiple memory corruption issues due to improperly     sanitized user-supplied input allow arbitrary code     execution. (CVE-2014-0564, CVE-2014-0558)

  - An integer overflow issue due to improperly sanitized     user-supplied input that allows arbitrary code     execution. (CVE-2014-0569)

  - An arbitrary code execution vulnerability due to the     handling of a dereferenced memory pointer.
    (CVE-2014-8439)

The version of Google Chrome installed on the remote host is a version prior to 38.0.2125.104. It is, therefore, affected by the following vulnerabilities due to the version of Adobe Flash bundled with the application :

  - Multiple memory corruption issues due to improperly     sanitized user-supplied input allow arbitrary code     execution. (CVE-2014-0564, CVE-2014-0558)

  - An integer overflow issue due to improperly sanitized     user-supplied input that allows arbitrary code     execution. (CVE-2014-0569)

  - An arbitrary code execution vulnerability due to the     handling of a dereferenced memory pointer.
    (CVE-2014-8439)

The remote host is missing KB3001237. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues due to improperly     sanitized user-supplied input allow arbitrary code     execution. (CVE-2014-0564, CVE-2014-0558)

  - An integer overflow issue due to improperly sanitized     user-supplied input that allows arbitrary code     execution. (CVE-2014-0569)

  - An arbitrary code execution vulnerability due to the     handling of a dereferenced memory pointer.
    (CVE-2014-8439)

According to its version, the installation of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 15.0.0.167.
It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues due to improperly     sanitized user-supplied input allow arbitrary code     execution. (CVE-2014-0564, CVE-2014-0558)

  - An integer overflow issue due to improperly sanitized     user-supplied input that allows arbitrary code     execution. (CVE-2014-0569)

  - An arbitrary code execution vulnerability due to the     handling of a dereferenced memory pointer.
    (CVE-2014-8439)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 15.0.0.249. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues due to improperly     sanitized user-supplied input allow arbitrary code     execution. (CVE-2014-0564, CVE-2014-0558)

  - An integer overflow issue due to improperly sanitized     user-supplied input that allows arbitrary code     execution. (CVE-2014-0569)

  - An arbitrary code execution vulnerability due to the     handling of a dereferenced memory pointer.
    (CVE-2014-8439)

According to its version, the installation of Adobe Flash Player installed on the remote Windows host is equal or prior to 15.0.0.167.
It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues due to improperly     sanitized user-supplied input allow arbitrary code     execution. (CVE-2014-0564, CVE-2014-0558)

  - An integer overflow issue due to improperly sanitized     user-supplied input that allows arbitrary code     execution. (CVE-2014-0569)

  - An arbitrary code execution vulnerability due to the     handling of a dereferenced memory pointer.
    (CVE-2014-8439)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 15.0.0.249. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues due to improperly     sanitized user-supplied input allow arbitrary code     execution. (CVE-2014-0564, CVE-2014-0558)

  - An integer overflow issue due to improperly sanitized     user-supplied input that allows arbitrary code     execution. (CVE-2014-0569)

  - An arbitrary code execution vulnerability due to the     handling of a dereferenced memory pointer.
    (CVE-2014-8439)

ID	Name	Product	Family	Severity
8810	Adobe AIR < 15.0.0.293 Multiple Vulnerabilities (APSB14-22)	Nessus Network Monitor	Web Clients	high
8808	Flash Player < 13.0.0.250 / 15.0.0.167 Multiple Vulnerabilities (APSB14-22)	Nessus Network Monitor	Web Clients	high
79404	GLSA-201411-06 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
78885	SuSE 11.3 Security Update : flash-player (SAT Patch Number 9898)	Nessus	SuSE Local Security Checks	critical
78719	openSUSE Security Update : flash-player (openSUSE-SU-2014:1329-1)	Nessus	SuSE Local Security Checks	critical
78503	RHEL 5 / 6 : flash-plugin (RHSA-2014:1648)	Nessus	Red Hat Local Security Checks	critical
78476	Google Chrome < 38.0.2125.104 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
78475	Google Chrome < 38.0.2125.104 Multiple Vulnerabilities	Nessus	Windows	critical
78444	MS KB3001237: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	Nessus	Windows	critical
78443	Flash Player for Mac <= 15.0.0.167 Multiple Vulnerabilities (APSB14-22)	Nessus	MacOS X Local Security Checks	critical
78442	Adobe AIR for Mac <= 15.0.0.249 Multiple Vulnerabilities (APSB14-21)	Nessus	MacOS X Local Security Checks	critical
78441	Flash Player <= 15.0.0.167 Multiple Vulnerabilities (APSB14-22)	Nessus	Windows	critical
78440	Adobe AIR <= AIR 15.0.0.249 Multiple Vulnerabilities (APSB14-22)	Nessus	Windows	critical

Detections

Analytics

CVE-2014-0569

high

Tenable Plugins

high

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical