Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to complete a transition from Low Integrity to Medium Integrity via unspecified vectors.

The remote host is affected by the vulnerability described in GLSA-201411-06 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

flash-player was updated to version 11.2.202.418 to fix 18 security issues.

These security issues were fixed :

  - Memory corruption vulnerabilities that could lead to     code execution (CVE-2014-0576, CVE-2014-0581,     CVE-2014-8440, CVE-2014-8441).

  - Use-after-free vulnerabilities that could lead to code     execution (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).

  - A double free vulnerability that could lead to code     execution (CVE-2014-0574).

  - Type confusion vulnerabilities that could lead to code     execution (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585,     CVE-2014-0586, CVE-2014-0590).

  - Heap buffer overflow vulnerabilities that could lead to     code execution (CVE-2014-0582, CVE-2014-0589).

  - An information disclosure vulnerability that could be     exploited to disclose session tokens (CVE-2014-8437).

  - A heap buffer overflow vulnerability that could be     exploited to perform privilege escalation from low to     medium integrity level (CVE-2014-0583). 

  - A permission issue that could be exploited to perform     privilege escalation from low to medium integrity level     (CVE-2014-8442).

flash-player was updated to version 11.2.202.418 to fix 18 security issues :

  - Memory corruption vulnerabilities that could lead to     code execution. (CVE-2014-0576 / CVE-2014-0581 /     CVE-2014-8440 / CVE-2014-8441)

  - Use-after-free vulnerabilities that could lead to code     execution. (CVE-2014-0573 / CVE-2014-0588 /     CVE-2014-8438)

  - A double free vulnerability that could lead to code     execution. (CVE-2014-0574)

  - Type confusion vulnerabilities that could lead to code     execution. (CVE-2014-0577 / CVE-2014-0584 /     CVE-2014-0585 / CVE-2014-0586 / CVE-2014-0590)

  - Heap buffer overflow vulnerabilities that could lead to     code execution. (CVE-2014-0582 / CVE-2014-0589)

  - An information disclosure vulnerability that could be     exploited to disclose session tokens. (CVE-2014-8437)

  - A heap buffer overflow vulnerability that could be     exploited to perform privilege escalation from low to     medium integrity level. (CVE-2014-0583)

  - A permission issue that could be exploited to perform     privilege escalation from low to medium integrity level     (CVE-2014-8442). Further information can be found at     http://helpx.adobe.com/security/products/flash-player/ap     sb14-24.html .

Versions of Adobe AIR earlier than 15.0.0.356 are unpatched for the following vulnerabilities :

 - Multiple memory corruption vulnerabilities allow an attacker to execute arbitrary code. (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)
 - Multiple use-after-free vulnerabilities could result in arbitrary code execution. (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438, CVE-2014-0574)
 - Multiple type confusion vulnerabilities could result in arbitrary code execution. (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)
 - Multiple heap-based buffer overflow vulnerabilities can be exploited to execute arbitrary code or elevate privileges. (CVE-2014-0583, CVE-2014-0582, CVE-2014-0589)
 - A permission issue that allows a remote attacker to gain elevated privileges. (CVE-2014-8442)
 - An information disclosure vulnerability can be exploited to disclose secret session tokens. (CVE-2014-8437) 

Versions of Flash player earlier than 15.0.0.223 are unpatched for the following vulnerabilities :

  - Multiple memory corruption vulnerabilities allow an attacker to execute arbitrary code. (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in arbitrary code execution. (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in arbitrary code execution. (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can be exploited to execute arbitrary code or elevate privileges. (CVE-2014-0583, CVE-2014-0582, CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited to disclose secret session tokens. (CVE-2014-8437) 

The remote host is missing KB3004150. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2014-0576,     CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in     arbitrary code execution. (CVE-2014-0573, CVE-2014-0588,     CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in     arbitrary code execution. (CVE-2014-0577, CVE-2014-0584,     CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can     be exploited to execute arbitrary code or elevate     privileges. (CVE-2014-0583, CVE-2014-0582,     CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain     elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited     to disclose secret session tokens. (CVE-2014-8437)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 38.0.2125.122. It is, therefore, affected by the following vulnerabilities due to the version of Adobe Flash bundled with the application :

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2014-0576,     CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in     arbitrary code execution. (CVE-2014-0573, CVE-2014-0588,     CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in     arbitrary code execution. (CVE-2014-0577, CVE-2014-0584,     CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can     be exploited to execute arbitrary code or elevate     privileges. (CVE-2014-0583, CVE-2014-0582,     CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain     elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited     to disclose secret session tokens. (CVE-2014-8437)

According to its version, the installation of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 15.0.0.189.
It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2014-0576,     CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in     arbitrary code execution. (CVE-2014-0573, CVE-2014-0588,     CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in     arbitrary code execution. (CVE-2014-0577, CVE-2014-0584,     CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can     be exploited to execute arbitrary code or elevate     privileges. (CVE-2014-0583, CVE-2014-0582,     CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain     elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited     to disclose secret session tokens. (CVE-2014-8437)

According to its version, the installation of Adobe AIR installed on the remote Mac OS X host is equal or prior to 15.0.0.293. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2014-0576,     CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in     arbitrary code execution. (CVE-2014-0573, CVE-2014-0588,     CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in     arbitrary code execution. (CVE-2014-0577, CVE-2014-0584,     CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can     be exploited to execute arbitrary code or elevate     privileges. (CVE-2014-0583, CVE-2014-0582,     CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain     elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited     to disclose secret session tokens. (CVE-2014-8437)

The version of Google Chrome installed on the remote Windows host is a version prior to 38.0.2125.122. It is, therefore, affected by the following vulnerabilities due to the version of Adobe Flash bundled with the application :

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2014-0576,     CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in     arbitrary code execution. (CVE-2014-0573, CVE-2014-0588,     CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in     arbitrary code execution. (CVE-2014-0577, CVE-2014-0584,     CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can     be exploited to execute arbitrary code or elevate     privileges. (CVE-2014-0583, CVE-2014-0582,     CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain     elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited     to disclose secret session tokens. (CVE-2014-8437)

According to its version, the installation of Adobe Flash Player installed on the remote Windows host is equal or prior to 15.0.0.189.
It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2014-0576,     CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in     arbitrary code execution. (CVE-2014-0573, CVE-2014-0588,     CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in     arbitrary code execution. (CVE-2014-0577, CVE-2014-0584,     CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can     be exploited to execute arbitrary code or elevate     privileges. (CVE-2014-0583, CVE-2014-0582,     CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain     elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited     to disclose secret session tokens. (CVE-2014-8437)

According to its version, the installation of Adobe AIR installed on the remote Windows host is equal or prior to 15.0.0.293. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption vulnerabilities allow an     attacker to execute arbitrary code. (CVE-2014-0576,     CVE-2014-0581, CVE-2014-8440, CVE-2014-8441)

  - Multiple use-after-free vulnerabilities could result in     arbitrary code execution. (CVE-2014-0573, CVE-2014-0588,     CVE-2014-8438, CVE-2014-0574)

  - Multiple type confusion vulnerabilities could result in     arbitrary code execution. (CVE-2014-0577, CVE-2014-0584,     CVE-2014-0585, CVE-2014-0586, CVE-2014-0590)

  - Multiple heap-based buffer overflow vulnerabilities can     be exploited to execute arbitrary code or elevate     privileges. (CVE-2014-0583, CVE-2014-0582,     CVE-2014-0589)

  - A permission issue that allows a remote attacker to gain     elevated privileges. (CVE-2014-8442)

  - An information disclosure vulnerability can be exploited     to disclose secret session tokens. (CVE-2014-8437)

ID	Name	Product	Family	Severity
79404	GLSA-201411-06 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
79324	openSUSE Security Update : flash-player (openSUSE-SU-2014:1444-1)	Nessus	SuSE Local Security Checks	critical
79308	SuSE 11.3 Security Update : flash-player (SAT Patch Number 9958)	Nessus	SuSE Local Security Checks	critical
8567	Adobe AIR < 15.0.0.356 Multiple Vulnerabilities (APSB14-24)	Nessus Network Monitor	Web Clients	high
8566	Flash Player < 15.0.0.223 Multiple Vulnerabilities (APSB14-24)	Nessus Network Monitor	Web Clients	high
79145	MS KB3004150: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	Nessus	Windows	critical
79144	Google Chrome < 38.0.2125.122 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
79143	Flash Player For Mac <= 15.0.0.189 Multiple Vulnerabilities (APSB14-24)	Nessus	MacOS X Local Security Checks	critical
79142	Adobe AIR for Mac <= 15.0.0.293 Multiple Vulnerabilities (APSB14-24)	Nessus	MacOS X Local Security Checks	critical
79141	Google Chrome < 38.0.2125.122 Multiple Vulnerabilities	Nessus	Windows	critical
79140	Flash Player <= 15.0.0.189 Multiple Vulnerabilities (APSB14-24)	Nessus	Windows	critical
79139	Adobe AIR <= 15.0.0.293 Multiple Vulnerabilities (APSB14-24)	Nessus	Windows	critical

Detections

Analytics

CVE-2014-0583

high

Tenable Plugins

critical

critical

critical

high

high

critical

critical

critical

critical

critical

critical

critical